description: The Google Login Plugin (versions 1.0 and 1.1) allows malicious anonymous users to authenticate successfully against Jenkins instances that are supposed to be locked down to a particular Google Apps domain through client-side request modification.
problem types: CWE-287
affected:
{
product: Jenkins Google Login Plugin
vendor: n/a
versions:
status: affected, version: Jenkins Google Login Plugin 1.0 and 1.1
}