PT-2023-6543 · Cloudbees+1 · Jenkins Cloudbees Cd Plugin+1

Andrea Chiera · Publicado 2023-10-25 · Atualizado 2023-11-01 · CVE-2023-46654

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:L/Au:S/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions Jenkins CloudBees CD Plugin versions 1.1.32 and earlier

Description The issue is related to the handling of symbolic links during the cleanup process of the 'CloudBees CD - Publish Artifact' post-build step. This allows attackers who can configure jobs to delete arbitrary files on the Jenkins controller file system. The vulnerability is caused by the plugin following symbolic links to locations outside of the expected directory.

Recommendations For Jenkins CloudBees CD Plugin versions 1.1.32 and earlier, update to version 1.1.33 or later, which deletes symbolic links without following them, thus resolving the issue.

Correção

Link Following

Path traversal

Enumeração de Fraquezas

CWE-59

CWE-61

CWE-22

Identificadores relacionados

BDU:2023-07305

CVE-2023-46654

GHSA-JX7X-RF3F-J644

Produtos afetados

Jenkins

Jenkins Cloudbees Cd Plugin

Referências · 13

• https://github.com/jenkinsci/electricflow-plugin · Nota
• https://github.com/jenkinsci/electricflow-plugin/commit/e45ca8428ae45f45ca07611e802eaa0f1484ab50 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-46654 · Nota de Segurança
• http://openwall.com/lists/oss-security/2023/10/25/2 · Nota
• https://osv.dev/vulnerability/GHSA-jx7x-rf3f-j644 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-07305 · Nota de Segurança
• https://vuldb.com/?id.243424 · Nota
• https://twitter.com/fletch_ai/status/1719536495290171507 · Publicação no Twitter
• https://tenable.com/cve/CVE-2023-46654 · Nota
• https://cybersecurity-help.cz/vdb/SB2023102612 · Nota
• https://osv.dev/vulnerability/CVE-2023-46654 · Aviso do Fabricante
• https://t.me/latest_high_impact_cve/65 · Publicação no Telegram
• https://jenkins.io/security/advisory/2023-10-25/#SECURITY-3237 · Aviso do Fabricante