PT-2023-30598 · Qualys · Qualys Container Scanning Connector Plugin

Published 2023-09-08 · Updated 2023-09-13 · CVE-2023-4777

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Qualys Container Scanning Connector Plugin versions 1.6.2.6 and earlier

Description An incorrect permission check in the Qualys Container Scanning Connector Plugin allows attackers with global Item/Configure permission, but lacking Item/Configure permission on any particular job, to enumerate credentials IDs of credentials stored in Jenkins and to connect to an attacker-specified URL using attacker-specified credentials IDs, capturing credentials stored in Jenkins.

Recommendations For Qualys Container Scanning Connector Plugin versions 1.6.2.6 and earlier, consider updating to a version that includes the necessary permission checks to prevent exploitation. As a temporary workaround, restrict access to the global Item/Configure permission to minimize the risk of credentials enumeration and capture. Additionally, limit the ability to connect to external URLs using stored credentials IDs until a patch is available.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2023-4777

Affected Products

Qualys Container Scanning Connector Plugin

References · 6

• https://qualys.com/security-advisories · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-4777 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4777 · Security Note
• https://t.me/cibsecurity/70138 · Telegram Post
• https://twitter.com/CVEnew/status/1700070066484846893 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1700096894318317924 · Twitter Post