PT-2022-4015 · Jenkins · Jenkins Openstack Heat Plugin+1

Daniel Beck · Published 2022-07-27 · Updated 2023-11-22 · CVE-2022-36911

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Openstack Heat Plugin versions 1.5 and earlier

Description A cross-site request forgery (CSRF) vulnerability allows attackers to connect to an attacker-specified URL. The issue is related to the lack of permission checks in methods implementing form validation, which do not require POST requests. This enables a remote attacker to perform a CSRF attack.

Recommendations For Jenkins Openstack Heat Plugin versions 1.5 and earlier, consider disabling the form validation methods until a patch is available to prevent exploitation of the CSRF vulnerability. Restrict access to the plugin's functionality to minimize the risk of attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

BDU:2022-04848

CVE-2022-36911

GHSA-FQHM-FJJV-7Q8X

Affected Products

Jenkins

Jenkins Openstack Heat Plugin

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2022-36911 · Security Note
• https://osv.dev/vulnerability/CVE-2022-36911 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04848 · Security Note
• https://osv.dev/vulnerability/GHSA-fqhm-fjjv-7q8x · Vendor Advisory
• https://jenkins.io/security/advisory/2022-07-27/#SECURITY-2105%20%281%29 · Vendor Advisory
• https://github.com/jenkinsci/openstack-heat-plugin · Note
• http://openwall.com/lists/oss-security/2022/07/27/1 · Note
• https://t.me/cibsecurity/47102 · Telegram Post
• https://jenkins.io/security/advisory/2022-07-27/#SECURITY-2105%20(1) · Note