PT-2022-25770 · Jenkins · Jenkins Cons3Rt Plugin+1

Valdes Che Zogou · Published 2022-09-21 · Updated 2023-11-01 · CVE-2022-41254

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jenkins CONS3RT Plugin versions 1.0.0 and earlier

Description The issue arises from missing permission checks in the Jenkins CONS3RT Plugin, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs. This can lead to the capture of credentials stored in Jenkins. Furthermore, the form validation methods in the plugin do not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.

Recommendations For Jenkins CONS3RT Plugin versions 1.0.0 and earlier, consider disabling the plugin until a patch is available to prevent attackers from exploiting the missing permission checks and CSRF vulnerability. Restrict access to the plugin's form validation methods to minimize the risk of exploitation. Avoid using the plugin to connect to HTTP servers using attacker-specified credentials IDs until the issue is resolved.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2022-41254

GHSA-74X9-FHC2-P79F

Affected Products

Jenkins

Jenkins Cons3Rt Plugin

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-41254 · Security Note
• https://jenkins.io/security/advisory/2022-09-21/#SECURITY-2751 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-41254 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-74x9-fhc2-p79f · Vendor Advisory
• https://github.com/jenkinsci/cons3rt-plugin · Note
• http://openwall.com/lists/oss-security/2022/09/21/5 · Note