PT-2022-18296 · Jenkins · Jenkins Kubernetes Continuous Deploy Plugin+1

Kevin Guerroudj · Published 2022-03-15 · Updated 2023-12-22 · CVE-2022-27209

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Kubernetes Continuous Deploy Plugin versions 2.3.1 and earlier

Description A missing permission check in the plugin allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. This issue affects several HTTP endpoints, which do not perform permission checks. The enumerated credentials IDs can be used as part of an attack to capture the credentials using another vulnerability.

Recommendations For Jenkins Kubernetes Continuous Deploy Plugin versions 2.3.1 and earlier, consider disabling the plugin until a patch is available to prevent attackers from enumerating credentials IDs. Restrict access to the affected HTTP endpoints to minimize the risk of exploitation. Avoid using the plugin with Overall/Read permission to reduce the attack surface. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2022-27209

GHSA-23X5-J68G-6JPW

Affected Products

Jenkins

Jenkins Kubernetes Continuous Deploy Plugin

References · 7

• https://osv.dev/vulnerability/CVE-2022-27209 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27209 · Security Note
• https://jenkins.io/security/advisory/2022-03-15/#SECURITY-2636 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-23x5-j68g-6jpw · Vendor Advisory
• https://github.com/jenkinsci/kubernetes-cd-plugin · Note
• https://t.me/cvenotify/64915 · Telegram Post
• http://openwall.com/lists/oss-security/2022/03/15/2 · Note