PT-2021-14721 · Jenkins · Jenkins Swamp Plugin+1

Daniel Beck · Published 2021-08-31 · Updated 2023-11-22 · CVE-2021-21678

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jenkins SAML Plugin versions 1.1.3 through 2.0.7

Description The issue allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins. This is due to an overly permissive implementation of an extension point in the Jenkins SAML Plugin, which is meant to selectively disable cross-site request forgery protection for specific URLs. The vulnerability was originally introduced in Jenkins SAML Plugin 1.1.3.

Recommendations For Jenkins SAML Plugin versions 1.1.3 through 2.0.7, update to version 2.0.8, which restricts the URLs for which CSRF protection is disabled, mitigating the issue. As a temporary workaround, consider restricting access to sensitive URLs in Jenkins to minimize the risk of exploitation.

Fix

Protection Mechanism Failure

CSRF

Weakness Enumeration

CWE-693

CWE-352

Related Identifiers

CVE-2021-21678

GHSA-R5W3-PFQ8-3R82

Affected Products

Jenkins

Jenkins Swamp Plugin

References · 8

• https://jenkins.io/security/advisory/2021-08-31/#SECURITY-2469 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r5w3-pfq8-3r82 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-21678 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-21678 · Security Note
• https://github.com/jenkinsci/saml-plugin · Note
• https://github.com/jenkinsci/saml-plugin/commit/e063317ee7e1c64a096e0ac323c7155b786c8b9d · Note
• https://t.me/cibsecurity/28089 · Telegram Post
• http://openwall.com/lists/oss-security/2021/08/31/1 · Note