PT-2022-4012 · Jenkins · Jenkins Openstack Heat Plugin+1

Daniel Beck · Published 2022-07-27 · Updated 2025-05-05 · CVE-2022-36912

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Openstack Heat Plugin versions 1.5 and earlier

Description The issue is related to insufficient authorization procedures in the Jenkins Openstack Heat Plugin, allowing a remote attacker to perform URL redirection. A missing permission check in the plugin enables attackers with Overall/Read permission to connect to a URL specified by the attacker. This is due to the plugin not performing permission checks in methods that implement form validation.

Recommendations For Jenkins Openstack Heat Plugin versions 1.5 and earlier, consider disabling the plugin until a patch is available to prevent attackers from exploiting the missing permission check. Restrict access to the plugin's form validation methods to minimize the risk of exploitation. Avoid using the plugin to connect to external URLs until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2022-04845

CVE-2022-36912

GHSA-HM53-HRHH-GWFQ

Affected Products

Jenkins

Jenkins Openstack Heat Plugin

References · 9

• https://bdu.fstec.ru/vul/2022-04845 · Security Note
• https://osv.dev/vulnerability/GHSA-hm53-hrhh-gwfq · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-36912 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36912 · Security Note
• https://jenkins.io/security/advisory/2022-07-27/#SECURITY-2105%20%281%29 · Vendor Advisory
• https://github.com/jenkinsci/openstack-heat-plugin · Note
• https://t.me/cvenotify/120807 · Telegram Post
• http://openwall.com/lists/oss-security/2022/07/27/1 · Note
• https://jenkins.io/security/advisory/2022-07-27/#SECURITY-2105%20(1) · Note