PT-2022-4038 · Jenkins · Jenkins Repository Connector Plugin+1

Kevin Guerroudj · Published 2022-07-27 · Updated 2023-11-02 · CVE-2022-36904

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Repository Connector Plugin versions 2.2.0 and earlier

Description The issue is related to insufficient authorization procedures in the Jenkins Repository Connector Plugin, allowing remote attackers with Overall/Read permission to disclose protected information about the file system. This can be achieved by exploiting a method implementing form validation that lacks a permission check, enabling attackers to check for the existence of an attacker-specified file path on the Jenkins controller file system. A sequence of requests can be used to effectively list the Jenkins controller file system.

Recommendations For Jenkins Repository Connector Plugin versions 2.2.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2022-04871

CVE-2022-36904

GHSA-FJPQ-F574-JC45

Affected Products

Jenkins

Jenkins Repository Connector Plugin

References · 7

• https://jenkins.io/security/advisory/2022-07-27/#SECURITY-2665%20%282%29 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36904 · Security Note
• https://bdu.fstec.ru/vul/2022-04871 · Security Note
• https://osv.dev/vulnerability/GHSA-fjpq-f574-jc45 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-36904 · Vendor Advisory
• http://openwall.com/lists/oss-security/2022/07/27/1 · Note
• https://jenkins.io/security/advisory/2022-07-27/#SECURITY-2665%20(2) · Note