PT-2020-15330 · Jenkins · Jenkins Radargun Plugin+1

Daniel Kalinowski · Published 2020-02-12 · Updated 2023-10-25 · CVE-2020-2123

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jenkins RadarGun Plugin versions 1.7 and earlier

Description The issue is related to the configuration of the YAML parser in the Jenkins RadarGun Plugin, which does not prevent the instantiation of arbitrary types. This results in a remote code execution vulnerability. The vulnerability can be exploited by users who have the ability to configure the RadarGun Plugin's build step.

Recommendations For Jenkins RadarGun Plugin versions 1.7 and earlier, update to version 1.8 or later, which configures its YAML parser to only instantiate safe types.

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2020-2123

GHSA-723P-9RCJ-XV8J

Affected Products

Jenkins

Jenkins Radargun Plugin

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2020-2123 · Security Note
• https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1733 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-723p-9rcj-xv8j · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-2123 · Vendor Advisory
• https://github.com/jenkinsci/radargun-plugin/commit/63aba3b31d1a8ea140f26923eb48a25ef7f87e87 · Note
• https://github.com/jenkinsci/radargun-plugin · Note
• https://t.me/cvenotify/922 · Telegram Post
• http://openwall.com/lists/oss-security/2020/02/12/3 · Note