PT-2019-11768 · Jenkins · Jenkins Gitlab Authentication Plugin+1

Wadeck Follonier · Published 2019-08-07 · Updated 2023-10-25 · CVE-2019-10372

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Gitlab Authentication Plugin version 1.4 and earlier

Description The issue allows attackers to redirect users to a URL outside Jenkins after a successful login, implementing an open redirect. This can be used by malicious sites to conduct phishing attacks, where users expect to have just logged in to Jenkins. The GitLab Authentication Plugin records the HTTP Referer header when the authentication process starts and redirects users to that URL when the user has finished logging in.

Recommendations For Jenkins Gitlab Authentication Plugin version 1.4 and earlier, consider disabling the redirect functionality in the GitLabSecurityRealm.java until a patch is available. Restrict access to the Referer header to minimize the risk of exploitation. Avoid using the Referer header in the authentication process until the issue is resolved.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2019-10372

GHSA-PG59-2W33-8VMC

Affected Products

Jenkins

Jenkins Gitlab Authentication Plugin

References · 6

• https://osv.dev/vulnerability/CVE-2019-10372 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-10372 · Security Note
• https://jenkins.io/security/advisory/2019-08-07/#SECURITY-796 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-pg59-2w33-8vmc · Vendor Advisory
• https://github.com/jenkinsci/gitlab-oauth-plugin/commit/10059a4d4e121e0c3b13f6e6f74843565bb0b49a · Note
• http://openwall.com/lists/oss-security/2019/08/07/1 · Note