Microsoft Entra ID (previously Azure AD)

CloudBees CIVersion: 711.v34046f788fd7

Community-maintained and unsupported

Plugin ID: azure-ad

Minimum Jenkins required: 2.555.3

Last released: 3 days, 12 hours ago

A Jenkins authentication & authorization plugin for Microsoft Entra ID (a.k.a. Azure Active Directory, Azure AD)

Credentials stored in plain text(last version affected: 0.3.3)
Client secret transmitted in plain text(last version affected: 1.1.2)
CSRF protection for any URL can be bypassed(last version affected: 179.vf6841393099e)
Session fixation vulnerability(last version affected: 303.va_91ef20ee49f)
Non-constant time nonce comparison(last version affected: 396.v86ce29279947)
Open redirect vulnerability(last version affected: 666.v6060de32f87d)
Privilege escalation(last version affected: 710.v0b_ff8e9cc2d2)

Microsoft Entra ID (previously Azure AD) 711.v34046f788fd7

SHA1:

1287d1fe3d48846e9f27e05b1834469bb96807ad

SHA256:

efc3ff891ef274ff0fc189b313ca5a6e4c8170d4126bf3d7708a9944bf9f8f19

Maintainers:

Dependencies:

All CloudBees CI Plugins