PT-2020-15477 · Jenkins · Jenkins Email Extension Plugin+1

Peter Stã¶Ckli · Published 2020-09-16 · Updated 2023-10-25 · CVE-2020-2253

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Email Extension Plugin versions 2.75 and earlier

Description The issue is related to the lack of hostname validation when connecting to the configured SMTP server. This could be exploited using a man-in-the-middle attack to intercept connections. It is estimated that this issue could potentially affect a significant number of devices, although the exact number is not specified.

Recommendations For Jenkins Email Extension Plugin versions 2.75 and earlier, set the Java system property mail.smtp.ssl.checkserveridentity to true on startup to enable hostname validation. Alternatively, enable this protection via the 'Advanced Email Properties' field in the plugin’s configuration in Configure System. In case of problems, this protection can be disabled again by setting mail.smtp.ssl.checkserveridentity to false using either method. Update to Jenkins Email Extension Plugin version 2.76 or later, which validates the SMTP hostname when connecting via TLS by default.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2020-2253

GHSA-4QRJ-99R6-JFRH

Affected Products

Jenkins

Jenkins Email Extension Plugin

References · 7

• https://osv.dev/vulnerability/CVE-2020-2253 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-2253 · Security Note
• https://jenkins.io/security/advisory/2020-09-16/#SECURITY-1851 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4qrj-99r6-jfrh · Vendor Advisory
• https://github.com/jenkinsci/email-ext-plugin/commit/ac039ba581f5946975a327709ff201b459900caa · Note
• https://github.com/jenkinsci/email-ext-plugin · Note
• http://openwall.com/lists/oss-security/2020/09/16/3 · Note