PT-2023-26193 · Jenkins · Jenkins Saml Single Sign On(Sso) Plugin+1

Daniel Beck · Published 2023-07-12 · Updated 2023-07-20 · CVE-2023-37945

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jenkins SAML Single Sign On(SSO) Plugin versions 2.1.0 through 2.3.0

Description A missing permission check in the Jenkins SAML Single Sign On(SSO) Plugin allows attackers with Overall/Read permission to download a string representation of the current security realm, potentially including sensitive information. This issue affects versions 2.1.0 through 2.3.0 of the plugin.

Recommendations For Jenkins SAML Single Sign On(SSO) Plugin versions 2.1.0 through 2.3.0, update to version 2.3.1 or later, which requires Overall/Administer permission to access the affected HTTP endpoint and only allows downloading a string representation if the current security realm is this plugin’s. As a temporary workaround, consider restricting access to the affected HTTP endpoint to minimize the risk of exploitation.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2023-37945

GHSA-P4WR-9WFM-F9JW

Affected Products

Jenkins

Jenkins Saml Single Sign On(Sso) Plugin

References · 7

• https://jenkins.io/security/advisory/2023-07-12/#SECURITY-3164 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-37945 · Security Note
• https://osv.dev/vulnerability/CVE-2023-37945 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-p4wr-9wfm-f9jw · Vendor Advisory
• http://openwall.com/lists/oss-security/2023/07/12/2 · Note
• https://t.me/cvenotify/54348 · Telegram Post
• https://t.me/cibsecurity/66591 · Telegram Post