PT-2020-15478 · Jenkins · Jenkins Blue Ocean Plugin+1

Jinchen Sheng · Published 2020-09-16 · Updated 2023-10-25 · CVE-2020-2254

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Blue Ocean Plugin versions 1.23.2 and earlier

Description The issue concerns an undocumented feature flag that allows an attacker with specific permissions to read arbitrary files on the Jenkins controller file system. The flag blueocean.features.GIT READ SAVE TYPE can be set to the value clone to enable this capability, affecting users with Item/Configure or Item/Create permission.

Recommendations For Jenkins Blue Ocean Plugin versions 1.23.2 and earlier, consider updating to version 1.23.3 or later, which no longer includes the vulnerable feature and redirects existing usage to a safer alternative.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-2254

GHSA-VQ7J-6PCQ-F48P

RHSA-2020:4297

RHSA-2020:5102

Affected Products

Jenkins

Jenkins Blue Ocean Plugin

References · 7

• https://jenkins.io/security/advisory/2020-09-16/#SECURITY-1956 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-2254 · Security Note
• https://osv.dev/vulnerability/GHSA-vq7j-6pcq-f48p · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-2254 · Vendor Advisory
• https://github.com/jenkinsci/blueocean-plugin · Note
• https://github.com/jenkinsci/blueocean-plugin/commit/f0dd4b68d62ac3c3c85012d6eb0c92bcebf85e12 · Note
• http://openwall.com/lists/oss-security/2020/09/16/3 · Note