PT-2018-9357 · Jenkins · Jenkins Cas Plugin+1

Thomas De Grenier De Latour · Publicado 2018-06-05 · Atualizado 2022-05-14 · CVE-2018-1000188

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Jenkins CAS Plugin versions 1.4.1 and older

Description A server-side request forgery issue exists in the CasSecurityRealm.java component, allowing attackers with Overall/Read access to cause the server to send a GET request to a specified URL. This issue is also accompanied by a CSRF vulnerability due to inadequate form validation, which did not initially require POST requests.

Recommendations For Jenkins CAS Plugin versions 1.4.1 and older, update to version 1.4.2 or later, which requires POST requests for form validation and the Overall/Administer permission, mitigating the issue.

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2018-1000188

GHSA-F8R7-7HV9-7F43

Produtos afetados

Jenkins

Jenkins Cas Plugin

Referências · 6

• https://github.com/jenkinsci/cas-plugin/commit/25d952151d61dec3627e875f03ac4f648d5e883d · Nota
• https://github.com/jenkinsci/cas-plugin · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000188 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-f8r7-7hv9-7f43 · Aviso do Fabricante
• https://jenkins.io/security/advisory/2018-06-04/#SECURITY-809 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-1000188 · Aviso do Fabricante