PT-2018-9357 · Jenkins · Jenkins Cas Plugin+1

Thomas De Grenier De Latour · Published 2018-06-05 · Updated 2022-05-14 · CVE-2018-1000188

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Jenkins CAS Plugin versions 1.4.1 and older

Description A server-side request forgery issue exists in the CasSecurityRealm.java component, allowing attackers with Overall/Read access to cause the server to send a GET request to a specified URL. This issue is also accompanied by a CSRF vulnerability due to inadequate form validation, which did not initially require POST requests.

Recommendations For Jenkins CAS Plugin versions 1.4.1 and older, update to version 1.4.2 or later, which requires POST requests for form validation and the Overall/Administer permission, mitigating the issue.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2018-1000188

GHSA-F8R7-7HV9-7F43

Affected Products

Jenkins

Jenkins Cas Plugin

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2018-1000188 · Security Note
• https://osv.dev/vulnerability/GHSA-f8r7-7hv9-7f43 · Vendor Advisory
• https://jenkins.io/security/advisory/2018-06-04/#SECURITY-809 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-1000188 · Vendor Advisory
• https://github.com/jenkinsci/cas-plugin/commit/25d952151d61dec3627e875f03ac4f648d5e883d · Note
• https://github.com/jenkinsci/cas-plugin · Note