PT-2022-17137 · Jenkins · Jenkins Ftp Publisher Plugin+1

Published 2022-02-15 · Updated 2023-11-03 · CVE-2022-25198

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jenkins SCP publisher Plugin versions 1.8 and earlier

Description A cross-site request forgery (CSRF) vulnerability allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials. This issue arises because the plugin does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to exploit this vulnerability. Furthermore, the form validation method does not require POST requests, contributing to the CSRF vulnerability.

Recommendations For Jenkins SCP publisher Plugin versions 1.8 and earlier, consider disabling the form validation method until a patch is available to prevent attackers from connecting to an attacker-specified SSH server. Restrict access to the plugin's functionality to minimize the risk of exploitation, especially for users with Overall/Read permission. As a temporary workaround, ensure that all requests to the plugin are validated and verified to prevent CSRF attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2022-25198

GHSA-7G7G-82FP-HPXX

Affected Products

Jenkins

Jenkins Ftp Publisher Plugin

References · 6

• https://jenkins.io/security/advisory/2022-02-15/#SECURITY-2323 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-25198 · Security Note
• https://osv.dev/vulnerability/CVE-2022-25198 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7g7g-82fp-hpxx · Vendor Advisory
• https://github.com/jenkinsci/scp-plugin · Note
• https://t.me/cibsecurity/37516 · Telegram Post