PT-2022-25768 · Jenkins · Jenkins Cons3Rt Plugin+1

Valdes Che Zogou · Published 2022-09-21 · Updated 2023-11-01 · CVE-2022-41252

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jenkins CONS3RT Plugin versions 1.0.0 and earlier

Description The issue is related to missing permission checks in the Jenkins CONS3RT Plugin, which allows users with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. This can be exploited by attackers to capture the credentials using another vulnerability. The plugin does not perform permission checks in several HTTP endpoints.

Recommendations For Jenkins CONS3RT Plugin versions 1.0.0 and earlier, consider restricting access to the plugin's HTTP endpoints until a patch is available. As a temporary workaround, review and restrict permissions for users with Overall/Read access to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2022-41252

GHSA-P37P-WG92-2FC4

Affected Products

Jenkins

Jenkins Cons3Rt Plugin

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-41252 · Security Note
• https://jenkins.io/security/advisory/2022-09-21/#SECURITY-2752 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-p37p-wg92-2fc4 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-41252 · Vendor Advisory
• https://github.com/jenkinsci/cons3rt-plugin · Note
• http://openwall.com/lists/oss-security/2022/09/21/5 · Note