Replay Cache Vulnerability in Jenkins SAML Plugin

CVE-2025-64131

What is CVE-2025-64131?

The Jenkins SAML Plugin, specifically version 4.583.vc68232f7018a_ and earlier, is susceptible to a replay cache vulnerability. This flaw allows malicious actors to intercept and replay SAML authentication requests. By exploiting this vulnerability, attackers can authenticate to Jenkins as legitimate users, gaining unauthorized access to sensitive information and potentially compromising the integrity of the system. It is crucial for users of affected versions to implement necessary updates and security measures to mitigate this risk.

References