PT-2020-15301 · Redgate+1 · Jenkins Redgate Sql Change Automation Plugin+1

Wadeck Follonier · Published 2020-01-15 · Updated 2023-10-25 · CVE-2020-2095

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Redgate SQL Change Automation Plugin versions 2.0.4 and earlier

Description The issue concerns the storage of an API key in an unencrypted form in job config.xml files on the Jenkins master. This allows users with Extended Read permission or access to the master file system to view the key. The problem arises from an incomplete fix of a previous security issue. It is estimated that this could potentially affect a significant number of devices, but the exact number is not specified. There is no information provided about real-world incidents where this issue was exploited.

Recommendations For versions 2.0.4 and earlier, update to version 2.0.5 or later, which stores the API key encrypted. Additionally, for existing jobs, save their configuration to overwrite existing plain text passwords. As a temporary workaround, consider restricting access to the Jenkins master file system and limiting Extended Read permissions to minimize the risk of exploitation.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2020-2095

GHSA-X23M-8C2H-6WG7

Affected Products

Jenkins

Jenkins Redgate Sql Change Automation Plugin

References · 6

• https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1696 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-2095 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-2095 · Security Note
• https://osv.dev/vulnerability/GHSA-x23m-8c2h-6wg7 · Vendor Advisory
• https://github.com/jenkinsci/redgate-sql-ci-plugin · Note
• https://github.com/jenkinsci/redgate-sql-ci-plugin/commit/962f1770eeb1f18dfac91d12461fa6db566e769e · Note