High WID-SEC-2022-0265 18 CVEs

Jenkins: Mehrere Schwachstellen

Published Apr 12, 2022 · Updated Mar 6, 2023 · Revision 8 · de-DE

Vendor: Jenkins Project Vendor: Red Hat Product: Enterprise Linux Product: Jenkins Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen und Dateien zu manipulieren.

Product

Jenkins ist ein erweiterbarer, webbasierter Integration Server zur kontinuierlichen Unterstützung bei Softwareentwicklungen aller Art.

Vulnerabilities 18

High 8.8

CVE-2022-29050

CSRF vulnerability in Jenkins Publish Over FTP Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins Publish Over FTP Plugin 1.16 and earlier allows attackers to connect to an FTP server using attacker-specified credentials.

Jenkins Project Jenkins Publish Over FTP Plugin org.jenkins-ci.plugins:publish-over-ftp Web / CMS Maven

Apr 12, 2022
High 8.0

CVE-2022-29039

Stored Cross-site Scripting vulnerability in Jenkins Gerrit Trigger Plugin

Jenkins Gerrit Trigger Plugin 2.35.2 and earlier does not escape the name and description of Base64 Encoded String parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Con…

Jenkins Project Jenkins Gerrit Trigger Plugin com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger Web / CMS Maven

Apr 12, 2022
High 8.0

CVE-2022-29045

Stored Cross-site Scripting vulnerability in Jenkins Promoted Builds Plugin

Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not escape the name and description of Promoted Build parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by a…

Jenkins Project Jenkins promoted builds Plugin org.jenkins-ci.plugins:promoted-builds Web / CMS Maven

Apr 12, 2022
High 8.0

CVE-2022-29049

Promotion names in Jenkins promoted builds Plugin are not validated when using Job DSL

Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not validate the names of promotions defined in Job DSL, allowing attackers with Job/Configure permission to create a promotion with an unsafe name.

Jenkins Project Jenkins promoted builds Plugin org.jenkins-ci.plugins:promoted-builds Web / CMS Maven

Apr 12, 2022
High 7.3

CVE-2022-29047

Untrusted users can modify some Pipeline libraries in Jenkins Pipeline: Deprecated Groovy Libraries Plugin

Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers able to submit pull requests (or equivalent), but not able to commit directly to the configured SCM, to effectively change the Pipeline behavior…

Jenkins Project Jenkins Pipeline: Shared Groovy Libraries Plugin org.jenkins-ci.plugins.workflow:workflow-cps-global-lib Web / CMS Maven

Apr 12, 2022
Medium 6.1

CVE-2017-2601

Cross-site Scripting in Jenkins

Jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in parameter names and descriptions (SECURITY-353). Users with the permission to configure jobs were able to inject JavaScript into parameter names and descriptions.

org.jenkins-ci.main:jenkins-core Web / CMS Maven

May 10, 2018
Medium 5.4

CVE-2022-29036 EPSS 72%

Cross-site Scripting in Jenkins Credentials Plugin

Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying parameters, resulting in a stored cros…

Jenkins Project Jenkins Credentials Plugin org.jenkins-ci.plugins:credentials Web / CMS Maven

Apr 12, 2022
Medium 5.4

CVE-2022-29037

Stored XSS in Jenkins CVS Plugin

Jenkins CVS Plugin 2.19 and earlier does not escape the name and description of CVS Symbolic Name parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Jenkins Project Jenkins CVS Plugin org.jenkins-ci.plugins:cvs Web / CMS Maven

Apr 12, 2022
Medium 5.4

CVE-2022-29038

Stored Cross-site Scripting vulnerabilities in Jenkins Extended Choice Parameter Plugin

Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the name and description of Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attack…

Jenkins Project Jenkins Extended Choice Parameter Plugin org.jenkins-ci.plugins:extended-choice-parameter Web / CMS Maven

Apr 12, 2022
Medium 5.4

CVE-2022-29040

Stored XSS vulnerability in Jenkins Git Parameter Plugin

Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Jenkins Project Jenkins Git Parameter Plugin org.jenkins-ci.tools:git-parameter Web / CMS Maven

Apr 12, 2022
Medium 5.4

CVE-2022-29041

Stored Cross-site Scripting vulnerability in Jenkins Jira Plugin

Jenkins Jira Plugin 3.7 and earlier, except 3.6.1, does not escape the name and description of Jira Issue and Jira Release Version parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attacke…

Jenkins Project Jenkins JIRA Plugin org.jenkins-ci.plugins:jira Web / CMS Maven

Apr 12, 2022
Medium 5.4

CVE-2022-29042

Stored Cross-site Scripting vulnerability in Jenkins Job Generator Plugin

Jenkins Job Generator Plugin 1.22 and earlier does not escape the name and description of Generator Parameter and Generator Choice parameters on Job Generator jobs' Build With Parameters views, resulting in a stored cross-site scripting (XSS) vulnerability ex…

Jenkins Project Jenkins Job Generator Plugin org.jenkins-ci.plugins:jobgenerator Web / CMS Maven

Apr 12, 2022
Medium 5.4

CVE-2022-29043

Stored Cross-site Scripting in Jenkins Mask Passwords Plugin

Jenkins Mask Passwords Plugin 3.0 and earlier does not escape the name and description of Non-Stored Password parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configur…

Jenkins Project Jenkins Mask Passwords Plugin org.jenkins-ci.plugins:mask-passwords Web / CMS Maven

Apr 12, 2022
Medium 5.4

CVE-2022-29044

Stored Cross-site Scripting in Jenkins Node and Label parameter Plugin

Jenkins Node and Label parameter Plugin 1.10.3 and earlier does not escape the name and description of Node and Label parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/…

Jenkins Project Jenkins Node and Label parameter Plugin org.jenkins-ci.plugins:nodelabelparameter Web / CMS Maven

Apr 12, 2022
Medium 5.4

CVE-2022-29046

Stored Cross-site Scripting vulnerability in Jenkins Subversion Plugin

Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with It…

Jenkins Project Jenkins Subversion Plugin subversion org.jenkins-ci.plugins:subversion Web / CMS Azure Linux Maven

Apr 12, 2022
Medium 4.3

CVE-2022-29048

CSRF vulnerability in Jenkins Subversion Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker-specified URL.

Jenkins Project Jenkins Subversion Plugin subversion org.jenkins-ci.plugins:subversion Web / CMS Azure Linux Maven

Apr 12, 2022
Medium 4.3

CVE-2022-29051

Missing permission checks in Jenkins Publish Over FTP Plugin

Missing permission checks in Jenkins Publish Over FTP Plugin 1.16 and earlier allow attackers with Overall/Read permission to connect to an FTP server using attacker-specified credentials.

Jenkins Project Jenkins Publish Over FTP Plugin org.jenkins-ci.plugins:publish-over-ftp Web / CMS Maven

Apr 12, 2022
Medium 4.3

CVE-2022-29052

Private key stored in plain text by Jenkins Google Compute Engine Plugin

Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.

Jenkins Project Jenkins Google Compute Engine Plugin org.jenkins-ci.plugins:google-compute-engine Web / CMS Maven

Apr 12, 2022

Revision history

2023-03-06 #8
Neue Updates von Red Hat aufgenommen
2023-01-12 #7
Neue Updates von Red Hat aufgenommen
2022-06-19 #6
Neue Updates von Red Hat aufgenommen
2022-06-09 #5
Neue Updates von Red Hat aufgenommen
2022-05-31 #4
Neue Updates von Red Hat aufgenommen
2022-05-30 #3
Neue Updates von Red Hat aufgenommen
2022-05-18 #2
Neue Updates von Red Hat aufgenommen
2022-04-12 #1
Initiale Fassung

References

Red Hat Security Advisory RHSA-2023:1064 vom 2023-03-06
https://access.redhat.com/errata/RHSA-2023:1064
Red Hat Security Advisory RHSA-2022:2280 vom 2022-05-31
https://access.redhat.com/errata/RHSA-2022:2280
Red Hat Security Advisory RHSA-2022:2205 vom 2022-05-19
https://access.redhat.com/errata/RHSA-2022:2205
Red Hat Security Advisory RHSA-2022:4947 vom 2022-06-17
https://access.redhat.com/errata/RHSA-2022:4947
Red Hat Security Advisory RHSA-2022:4909 vom 2022-06-10
https://access.redhat.com/errata/RHSA-2022:4909
Jenkins Security Advisory vom 2022-04-12
https://www.jenkins.io/security/advisory/2022-04-12/
Red Hat Security Advisory RHSA-2022:2281 vom 2022-05-31
https://access.redhat.com/errata/RHSA-2022:2281
Red Hat Security Advisory RHSA-2023:0017 vom 2023-01-12
https://access.redhat.com/errata/RHSA-2023:0017