PT-2019-11309 · Jenkins · Jenkins Token Macro Plugin+1

Andy Caldwell + 1 · Published 2019-02-06 · Updated 2023-10-25 · CVE-2019-1003011

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Jenkins Token Macro Plugin versions 2.5 and earlier

Description: An information exposure and denial of service issue exists that allows attackers with the ability to control token macro input to define recursive input, resulting in unexpected macro evaluation. This could be used by users able to affect input to token expansion, such as change log messages, to inject additional tokens into the input, which would then be expanded, resulting in information disclosure, for example, values of environment variables, or denial of service.

Recommendations: For Jenkins Token Macro Plugin versions 2.5 and earlier, update to a version where most tokens have been changed to no longer recursively apply token expansion to prevent information disclosure and denial of service. As a temporary workaround, consider restricting the ability to control token macro input to minimize the risk of exploitation.

Fix

DoS

Uncontrolled Recursion

Weakness Enumeration

CWE-674

Related Identifiers

CVE-2019-1003011

GHSA-23H9-M55M-C5JP

Affected Products

Jenkins

Jenkins Token Macro Plugin

References · 7

• https://osv.dev/vulnerability/GHSA-23h9-m55m-c5jp · Vendor Advisory
• https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1102 · Vendor Advisory
• https://access.redhat.com/errata/RHBA-2019:0327 · Vendor Advisory
• https://access.redhat.com/errata/RHBA-2019:0326 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-1003011 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1003011 · Security Note
• https://github.com/jenkinsci/token-macro-plugin/commit/70163600031ea8d43833e6eea928f8fa2e44f96a · Note