PT-2023-28173 · Jenkins · Jenkins Azure Ad Plugin+1

Yaroslav Afenkin · Publicado 2023-09-06 · Atualizado 2023-09-11 · CVE-2023-41935

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Azure AD Plugin versions 396.v86ce29279947 and earlier, except 378.380.v545b 1154b 3fb

Description The issue is related to a non-constant time comparison function used when checking whether the provided and expected CSRF protection nonce are equal. This potentially allows attackers to use statistical methods to obtain a valid nonce.

Recommendations For Jenkins Azure AD Plugin versions 396.v86ce29279947 and earlier, except 378.380.v545b 1154b 3fb , consider updating to a version that uses a constant time comparison function to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-697

Identificadores relacionados

CVE-2023-41935

GHSA-HJ7P-H74J-6GXJ

Produtos afetados

Jenkins

Jenkins Azure Ad Plugin

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-41935 · Nota de Segurança
• https://jenkins.io/security/advisory/2023-09-06/#SECURITY-3227 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-41935 · Aviso do Fabricante
• https://t.me/cvenotify/57984 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-hj7p-h74j-6gxj · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2023/09/06/9 · Nota
• https://twitter.com/VulmonFeeds/status/1699434203371204872 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1699416759152071099 · Publicação no Twitter