PT-2023-28173 · Jenkins · Jenkins Azure Ad Plugin+1

Yaroslav Afenkin · Published 2023-09-06 · Updated 2023-09-11 · CVE-2023-41935

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Azure AD Plugin versions 396.v86ce29279947 and earlier, except 378.380.v545b 1154b 3fb

Description The issue is related to a non-constant time comparison function used when checking whether the provided and expected CSRF protection nonce are equal. This potentially allows attackers to use statistical methods to obtain a valid nonce.

Recommendations For Jenkins Azure AD Plugin versions 396.v86ce29279947 and earlier, except 378.380.v545b 1154b 3fb , consider updating to a version that uses a constant time comparison function to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-697

Related Identifiers

CVE-2023-41935

GHSA-HJ7P-H74J-6GXJ

Affected Products

Jenkins

Jenkins Azure Ad Plugin

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-41935 · Security Note
• https://jenkins.io/security/advisory/2023-09-06/#SECURITY-3227 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-41935 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hj7p-h74j-6gxj · Vendor Advisory
• https://t.me/cvenotify/57984 · Telegram Post
• http://openwall.com/lists/oss-security/2023/09/06/9 · Note
• https://twitter.com/VulmonFeeds/status/1699434203371204872 · Twitter Post
• https://twitter.com/CVEnew/status/1699416759152071099 · Twitter Post