PT-2023-26193 · Jenkins · Jenkins Saml Single Sign On(Sso) Plugin+1

Daniel Beck · Publicado 2023-07-12 · Atualizado 2023-07-20 · CVE-2023-37945

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jenkins SAML Single Sign On(SSO) Plugin versions 2.1.0 through 2.3.0

Description A missing permission check in the Jenkins SAML Single Sign On(SSO) Plugin allows attackers with Overall/Read permission to download a string representation of the current security realm, potentially including sensitive information. This issue affects versions 2.1.0 through 2.3.0 of the plugin.

Recommendations For Jenkins SAML Single Sign On(SSO) Plugin versions 2.1.0 through 2.3.0, update to version 2.3.1 or later, which requires Overall/Administer permission to access the affected HTTP endpoint and only allows downloading a string representation if the current security realm is this plugin’s. As a temporary workaround, consider restricting access to the affected HTTP endpoint to minimize the risk of exploitation.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2023-37945

GHSA-P4WR-9WFM-F9JW

Produtos afetados

Jenkins

Jenkins Saml Single Sign On(Sso) Plugin

Referências · 7

• http://openwall.com/lists/oss-security/2023/07/12/2 · Nota
• https://jenkins.io/security/advisory/2023-07-12/#SECURITY-3164 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-37945 · Nota de Segurança
• https://t.me/cvenotify/54348 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-37945 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-p4wr-9wfm-f9jw · Aviso do Fabricante
• https://t.me/cibsecurity/66591 · Publicação no Telegram