Jenkins SAML Plugin versions up to 4.583.vc68232f7018a_ do not implement a replay cache, allowing attackers who can observe SAML authentication requests to replay them and authenticate as the targeted user. The vulnerability is fixed in version 4.583.585.v22ccc1139f55, which adds a replay cache to reject replayed requests.