PT-2023-24126 · Jenkins · Jenkins Saml Single Sign On(Sso) Plugin+1

Kevin Guerroudj · Published 2023-05-16 · Updated 2023-05-26 · CVE-2023-32995

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jenkins SAML Single Sign On(SSO) Plugin versions 2.0.0 and earlier

Description A cross-site request forgery (CSRF) vulnerability allows attackers to send an HTTP POST request with a JSON body containing attacker-specified content to miniOrange's API for sending emails. The vulnerability is due to the lack of a permission check in an HTTP endpoint, which can be exploited by attackers with Overall/Read permission. Additionally, the HTTP endpoint does not require POST requests, contributing to the CSRF vulnerability.

Recommendations For Jenkins SAML Single Sign On(SSO) Plugin versions 2.0.0 and earlier, update to version 2.0.1 or later, which removes the affected HTTP endpoint. As a temporary workaround, consider restricting access to the vulnerable HTTP endpoint to minimize the risk of exploitation.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2023-32995

GHSA-GHPM-MGF5-CV8Q

Affected Products

Jenkins

Jenkins Saml Single Sign On(Sso) Plugin

References · 5

• https://jenkins.io/security/advisory/2023-05-16/#SECURITY-2994 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32995 · Security Note
• https://osv.dev/vulnerability/CVE-2023-32995 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-ghpm-mgf5-cv8q · Vendor Advisory
• https://t.me/cvenotify/50576 · Telegram Post