PT-2019-11724 · Jenkins · Jenkins Artifactory Plugin

Published 2019-05-31 · Updated 2023-10-25 · CVE-2019-10323

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Artifactory Plugin versions 3.2.3 and earlier

Description A missing permission check in the Jenkins Artifactory Plugin allows users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins. The plugin provides a list of applicable credential IDs to allow users configuring the plugin to select the one to use, but it does not correctly check permissions. This issue can be used as part of an attack to capture the credentials using another vulnerability.

Recommendations For Jenkins Artifactory Plugin versions 3.2.3 and earlier, as a temporary workaround, consider restricting access to the fillCredentialsIdItems methods until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2019-10323

GHSA-3M8W-442M-3P2Q

Affected Products

Jenkins Artifactory Plugin

References · 10

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0846 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-10323 · Security Note
• https://osv.dev/vulnerability/GHSA-3m8w-442m-3p2q · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-10323 · Vendor Advisory
• https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1015%20(2) · Note
• https://web.archive.org/web/20200227054747/http://securityfocus.com/bid/108540 · Note
• https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1015%20%282%29 · Note
• http://openwall.com/lists/oss-security/2019/05/31/2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10323 · Note
• http://securityfocus.com/bid/108540 · Note