system
Describe <CVE-2018-1000602>.
user
What is <CVE-2018-1000602>?
assistant
A session fixation vulnerability exists in Jenkins SAML Plugin 1.0.6 and earlier in SamlSecurityRealm.java that allows unauthorized attackers to impersonate another users if they can control the pre-authentication session..