Medium WID-SEC-2022-0445 45 CVEs

Jenkins: Mehrere Schwachstellen

Published Jun 22, 2022 · Updated Feb 22, 2023 · Revision 7 · de-DE

Vendor: Jenkins Project Vendor: Red Hat Product: Enterprise Linux Product: Jenkins Product: Jenkins LTS < 2.332.4 Product: Jenkins LTS < 2.346.1 Product: Jenkins weekly < 2.356 Product: openshift Product: Openshift Container Platform Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.

Product

Jenkins ist ein erweiterbarer, webbasierter Integration Server zur kontinuierlichen Unterstützung bei Softwareentwicklungen aller Art.

Vulnerabilities 45

High 8.8

CVE-2022-34177

Arbitrary file write vulnerability in Jenkins Pipeline: Input Step Plugin

Jenkins Pipeline: Input Step Plugin 448.v37cea_9a_10a_70 and earlier archives files uploaded for `file` parameters for Pipeline `input` steps on the controller as part of build metadata, using the parameter name without sanitization as a relative path inside …

Jenkins Project Jenkins Pipeline: Input Step Plugin org.jenkins-ci.plugins:pipeline-input-step Web / CMS Maven

Jun 22, 2022
High 8.8

CVE-2022-34178

Reflected Cross site scripting in Jenkins Embeddable Build Status Plugin

Jenkins Embeddable Build Status Plugin 2.0.3 allows specifying a 'link' query parameter that build status badges will link to, without restricting possible values, resulting in a reflected cross-site scripting (XSS) vulnerability.

Jenkins Project Jenkins Embeddable Build Status Plugin org.jenkins-ci.plugins:embeddable-build-status Web / CMS Maven

Jun 22, 2022
High 8.8

CVE-2022-34182

Reflected Cross-site Scripting in Jenkins Nested View Plugin

Jenkins Nested View Plugin 1.20 through 1.25 (both inclusive) does not escape search parameters, resulting in a reflected cross-site scripting (XSS) vulnerability.

Jenkins Project Jenkins Nested View Plugin org.jenkins-ci.plugins:nested-view Web / CMS Maven

Jun 22, 2022
High 8.0

CVE-2022-34170

Cross-site Scripting vulnerability in Jenkins

In Jenkins 2.320 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the help icon does not escape the feature name that is part of its tooltip, effectively undoing the fix for SECURITY-1955, resulting in a cross-site scripting…

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core jenkins Web / CMS Alpine Maven

Jun 22, 2022
High 8.0

CVE-2022-34171

Cross-site Scripting vulnerability in Jenkins

In Jenkins 2.321 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the HTML output generated for new symbol-based SVG icons includes the 'title' attribute of 'l:ionicon' (until Jenkins 2.334) and 'alt' attribute of 'l:icon' (…

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core jenkins Web / CMS Alpine Maven

Jun 22, 2022
High 8.0

CVE-2022-34172

Cross-site Scripting vulnerability in Jenkins

In Jenkins 2.340 through 2.355 (both inclusive) symbol-based icons unescape previously escaped values of 'tooltip' parameters, resulting in a cross-site scripting (XSS) vulnerability.

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core jenkins Web / CMS Alpine Maven

Jun 22, 2022
High 8.0

CVE-2022-34173

Cross-site Scripting vulnerability in Jenkins

In Jenkins 2.340 through 2.355 (both inclusive) the tooltip of the build button in list views supports HTML without escaping the job display name, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core jenkins Web / CMS Alpine Maven

Jun 22, 2022
High 8.0

CVE-2022-34176 EPSS 78%

Cross-site Scripting in Jenkins JUnit Plugin

Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.

Jenkins Project Jenkins JUnit Plugin org.jenkins-ci.plugins:junit Web / CMS Maven

Jun 22, 2022
High 8.0

CVE-2022-34183

Cross-site Scripting in Jenkins Agent Server Parameter Plugin

Jenkins Agent Server Parameter Plugin 1.1 and earlier does not escape the name and description of Agent Server parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configu…

Jenkins Project Jenkins Agent Server Parameter Plugin io.jenkins.plugins:agent-server-parameter Web / CMS Maven

Jun 22, 2022
High 8.0

CVE-2022-34184

Cross-site Scripting in Jenkins CRX Content Package Deployer Plugin

Jenkins CRX Content Package Deployer Plugin 1.9 and earlier does not escape the name and description of CRX Content Package Choice parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attacke…

Jenkins Project Jenkins CRX Content Package Deployer Plugin org.jenkins-ci.plugins:crx-content-package-deployer Web / CMS Maven

Jun 22, 2022
High 8.0

CVE-2022-34185

Cross-site Scripting in Jenkins Date Parameter Plugin

Jenkins Date Parameter Plugin 0.0.4 and earlier does not escape the name and description of Date parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Jenkins Project Jenkins Date Parameter Plugin me.leejay.jenkins:date-parameter Web / CMS Maven

Jun 22, 2022
High 8.0

CVE-2022-34186

Cross-site Scripting in Jenkins Dynamic Extended Choice Parameter Plugin

Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape the name and description of Moded Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attac…

Jenkins Project Jenkins Dynamic Extended Choice Parameter Plugin com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter Web / CMS Maven

Jun 22, 2022
High 8.0

CVE-2022-34187

Cross-site Scripting in Jenkins Filesystem List Parameter Plugin

Jenkins Filesystem List Parameter Plugin 0.0.7 and earlier does not escape the name and description of File system objects list parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers …

Jenkins Project Jenkins Filesystem List Parameter Plugin aendter.jenkins.plugins:filesystem-list-parameter-plugin Web / CMS Maven

Jun 22, 2022
High 8.0

CVE-2022-34188

Cross-site Scripting in Jenkins Hidden Parameter Plugin

Jenkins Hidden Parameter Plugin 0.0.4 and earlier does not escape the name and description of Hidden Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configu…

Jenkins Project Jenkins Hidden Parameter Plugin org.jenkins-ci.plugins:hidden-parameter Web / CMS Maven

Jun 22, 2022
High 8.0

CVE-2022-34189

Cross-site Scripting in Jenkins Image Tag Parameter Plugin

Jenkins Image Tag Parameter Plugin 1.10 and earlier does not escape the name and description of Image Tag parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure pe…

Jenkins Project Jenkins Image Tag Parameter Plugin org.jenkins-ci.plugins:image-tag-parameter Web / CMS Maven

Jun 22, 2022
High 8.0

CVE-2022-34190

Cross-site Scripting in Jenkins Maven Metadata Plugin

Jenkins Maven Metadata Plugin for Jenkins CI server Plugin 2.1 and earlier does not escape the name and description of List maven artifact versions parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability explo…

Jenkins Project Jenkins Maven Metadata Plugin for Jenkins CI server Plugin eu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin Web / CMS Maven

Jun 22, 2022
High 8.0

CVE-2022-34191

Cross-site Scripting in Jenkins NS-ND Integration Performance Publisher Plugin

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.77 and earlier does not escape the name of NetStorm Test parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/…

Jenkins Project Jenkins NS-ND Integration Performance Publisher Plugin io.jenkins.plugins:cavisson-ns-nd-integration Web / CMS Maven

Jun 22, 2022
High 8.0

CVE-2022-34192

Cross-site Scripting in Jenkins ontrack Jenkins Plugin

Jenkins ontrack Jenkins Plugin 4.0.0 and earlier does not escape the name of Ontrack: Multi Parameter choice, Ontrack: Parameter choice, and Ontrack: SingleParameter parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) v…

Jenkins Project Jenkins ontrack Jenkins Plugin org.jenkins-ci.plugins:ontrack Web / CMS Maven

Jun 22, 2022
High 8.0

CVE-2022-34193

Cross-site Scripting in Jenkins Package Version Plugin

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Jenkins Project Jenkins Package Version Plugin org.lilicurroad.jenkins:packageversion Web / CMS Maven

Jun 22, 2022
High 8.0

CVE-2022-34194

Cross-site Scripting in Jenkins Readonly Parameter Plugin

Jenkins Readonly Parameter Plugin 1.0.0 and earlier does not escape the name and description of Readonly String and Readonly Text parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attacker…

Jenkins Project Jenkins Readonly Parameter Plugin org.jenkins-ci.plugins:readonly-parameters Web / CMS Maven

Jun 22, 2022
High 8.0

CVE-2022-34195

Cross-site Scripting in Jenkins Repository Connector Plugin

Jenkins Repository Connector Plugin 2.2.0 and earlier does not escape the name and description of Maven Repository Artifact parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with…

Jenkins Project Jenkins Repository Connector Plugin org.jenkins-ci.plugins:repository-connector Web / CMS Maven

Jun 22, 2022
High 8.0

CVE-2022-34196

Cross-site Scripting in Jenkins REST List Parameter Plugin

Jenkins REST List Parameter Plugin 1.5.2 and earlier does not escape the name and description of REST list parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure p…

Jenkins Project Jenkins REST List Parameter Plugin io.jenkins.plugins:rest-list-parameter Web / CMS Maven

Jun 22, 2022
High 8.0

CVE-2022-34197

Cross-site Scripting in Jenkins Sauce OnDemand Plugin

Jenkins Sauce OnDemand Plugin 1.204 and earlier does not escape the name and description of Sauce Labs Browsers parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Config…

Jenkins Project Jenkins Sauce OnDemand Plugin org.jenkins-ci.plugins:sauce-ondemand Web / CMS Maven

Jun 22, 2022
High 8.0

CVE-2022-34198

Cross-site Scripting in Jenkins Stash Branch Parameter Plugin

Jenkins Stash Branch Parameter Plugin 0.3.0 and earlier does not escape the name and description of Stash Branch parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Confi…

Jenkins Project Jenkins Stash Branch Parameter Plugin org.jenkins-ci.plugins:StashBranchParameter Web / CMS Maven

Jun 22, 2022
High 7.5

CVE-2022-34175

Unauthorized view fragment access in Jenkins

Jenkins 2.335 through 2.355 (both inclusive) allows attackers in some cases to bypass a protection mechanism, thereby directly accessing some view fragments containing sensitive information, bypassing any permission checks in the corresponding view.

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven

Jun 22, 2022
Medium 6.5

CVE-2022-34181

Agent-to-controller security bypass in Jenkins xUnit Plugin

Jenkins xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user-specified directory if it doesn't exist, and parsing files inside it as test results, allowing attackers able to control agent processes to create an arbitrar…

Jenkins Project Jenkins xUnit Plugin org.jenkins-ci.plugins:xunit Web / CMS Maven

Jun 22, 2022
Medium 6.1

CVE-2017-2601

Cross-site Scripting in Jenkins

Jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in parameter names and descriptions (SECURITY-353). Users with the permission to configure jobs were able to inject JavaScript into parameter names and descriptions.

org.jenkins-ci.main:jenkins-core Web / CMS Maven

May 10, 2018
Medium 5.3

CVE-2022-34174

Observable timing discrepancy allows determining username validity in Jenkins

In Jenkins 2.355 and earlier, LTS 2.332.3 and earlier, an observable timing discrepancy on the login form allows distinguishing between login attempts with an invalid username, and login attempts with a valid username and wrong password, when using the Jenkin…

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core jenkins Web / CMS Alpine Maven

Jun 22, 2022
Medium 5.3

CVE-2022-34179

Path Traversal vulnerability in Jenkins Embeddable Build Status Plugin

Jenkins Embeddable Build Status Plugin 2.0.3 and earlier allows specifying a `style` query parameter that is used to choose a different SVG image style without restricting possible values, resulting in a relative path traversal vulnerability that allows attac…

Jenkins Project Jenkins Embeddable Build Status Plugin org.jenkins-ci.plugins:embeddable-build-status Web / CMS Maven

Jun 22, 2022
Medium 5.3

CVE-2022-34180

Improper authorization in Jenkins Embeddable Build Status Plugin bypasses ViewStatus permission requirement

Jenkins Embeddable Build Status Plugin 2.0.3 and earlier does not correctly perform the ViewStatus permission check in the HTTP endpoint it provides for "unprotected" status badge access, allowing attackers without any permissions to obtain the build status b…

Jenkins Project Jenkins Embeddable Build Status Plugin org.jenkins-ci.plugins:embeddable-build-status Web / CMS Maven

Jun 22, 2022
Medium 4.3

CVE-2022-34199

Plaintext Storage of a Password in Jenkins Convertigo Mobile Platform Plugin

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.

Jenkins Project Jenkins Convertigo Mobile Platform Plugin com.convertigo.jenkins.plugins:convertigo-mobile-platform Web / CMS Maven

Jun 22, 2022
Medium 4.3

CVE-2022-34200

Cross-Site Request Forgery in Jenkins Convertigo Mobile Platform Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier allows attackers to connect to an attacker-specified URL.

Jenkins Project Jenkins Convertigo Mobile Platform Plugin com.convertigo.jenkins.plugins:convertigo-mobile-platform Web / CMS Maven

Jun 22, 2022
Medium 4.3

CVE-2022-34201

Missing permission check in Jenkins Convertigo Mobile Platform Plugin

A missing permission check in Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.

Jenkins Project Jenkins Convertigo Mobile Platform Plugin com.convertigo.jenkins.plugins:convertigo-mobile-platform Web / CMS Maven

Jun 22, 2022
Medium 4.3

CVE-2022-34203

Cross-Site Request Forgery in Jenkins EasyQA Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins EasyQA Plugin 1.0 and earlier allows attackers to connect to an attacker-specified HTTP server.

Jenkins Project Jenkins EasyQA Plugin com.geteasyqa:easyqa Web / CMS Maven

Jun 22, 2022
Medium 4.3

CVE-2022-34204

Jenkins EasyQA Plugin Missing Authorization vulnerability

A missing permission check in Jenkins EasyQA Plugin 1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server.

Jenkins Project Jenkins EasyQA Plugin com.geteasyqa:easyqa Web / CMS Maven

Jun 22, 2022
Medium 4.3

CVE-2022-34205

Cross-Site Request Forgery in Jenkins Jianliao Notification Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins Jianliao Notification Plugin 1.1 and earlier allows attackers to send HTTP POST requests to an attacker-specified URL.

Jenkins Project Jenkins Jianliao Notification Plugin org.jenkins-ci.plugins:jianliao Web / CMS Maven

Jun 22, 2022
Medium 4.3

CVE-2022-34206

Jenkins Jianliao Notification Plugin Missing Authorization vulnerability

A missing permission check in Jenkins Jianliao Notification Plugin 1.1 and earlier allows attackers with Overall/Read permission to send HTTP POST requests to an attacker-specified URL.

Jenkins Project Jenkins Jianliao Notification Plugin org.jenkins-ci.plugins:jianliao Web / CMS Maven

Jun 22, 2022
Medium 4.3

CVE-2022-34207

Cross-Site Request Forgery in Jenkins Beaker builder Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins Beaker builder Plugin 1.10 and earlier allows attackers to connect to an attacker-specified URL.

Jenkins Project Jenkins Beaker Builder Plugin org.jenkins-ci.plugins:beaker-builder Web / CMS Maven

Jun 22, 2022
Medium 4.3

CVE-2022-34208

Jenkins Beaker builder Plugin Missing Authorization vulnerability

A missing permission check in Jenkins Beaker builder Plugin 1.10 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.

Jenkins Project Jenkins Beaker Builder Plugin org.jenkins-ci.plugins:beaker-builder Web / CMS Maven

Jun 22, 2022
Medium 4.3

CVE-2022-34209

Cross-Site Request Forgery in Jenkins ThreadFix Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers to connect to an attacker-specified URL.

Jenkins Project Jenkins ThreadFix Plugin org.jenkins-ci.plugins:threadfix Web / CMS Maven

Jun 22, 2022
Medium 4.3

CVE-2022-34210

Missing permission check in Jenkins ThreadFix Plugin

A missing permission check in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.

Jenkins Project Jenkins ThreadFix Plugin org.jenkins-ci.plugins:threadfix Web / CMS Maven

Jun 22, 2022
Medium 4.3

CVE-2022-34211

Cross-Site Request Forgery in Jenkins vRealize Orchestrator Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers to send an HTTP POST request to an attacker-specified URL.

Jenkins Project Jenkins vRealize Orchestrator Plugin org.jenkins-ci.plugins:vmware-vrealize-orchestrator Web / CMS Maven

Jun 22, 2022
Medium 4.3

CVE-2022-34212

Missing permission check in Jenkins vRealize Orchestrator Plugin

A missing permission check in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST request to an attacker-specified URL.

Jenkins Project Jenkins vRealize Orchestrator Plugin org.jenkins-ci.plugins:vmware-vrealize-orchestrator Web / CMS Maven

Jun 22, 2022
Low 3.3

CVE-2022-34202

User passwords stored in plain text by Jenkins EasyQA Plugin

Jenkins EasyQA Plugin 1.0 and earlier stores user passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

Jenkins Project Jenkins EasyQA Plugin com.geteasyqa:easyqa Web / CMS Maven

Jun 22, 2022
Low 3.3

CVE-2022-34213

Squash TM Publisher (Squash4Jenkins) Plugin stores passwords stored in plain text

Jenkins Squash TM Publisher (Squash4Jenkins) Plugin 1.0.0 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

Jenkins Project Jenkins Squash TM Publisher (Squash4Jenkins) Plugin org.jenkins-ci.plugins:squashtm-publisher Web / CMS Maven

Jun 22, 2022

Revision history

2023-02-22 #7
Neue Updates von Red Hat aufgenommen
2023-02-15 #6
Neue Updates von Red Hat aufgenommen
2023-01-12 #5
Neue Updates von Red Hat aufgenommen
2023-01-08 #4
Neue Updates von Red Hat aufgenommen
2023-01-05 #3
Neue Updates von Red Hat aufgenommen
2022-09-21 #2
Neue Updates von Red Hat aufgenommen
2022-06-22 #1
Initiale Fassung

References

Red Hat Security Advisory RHSA-2023:0777 vom 2023-02-23
https://access.redhat.com/errata/RHSA-2023:0777
Red Hat Security Advisory RHSA-2023:0697 vom 2023-02-16
https://access.redhat.com/errata/RHSA-2023:0697
Red Hat Security Advisory RHSA-2023:0698 vom 2023-02-15
https://access.redhat.com/errata/RHSA-2023:0698
Red Hat Security Advisory RHSA-2023:0017 vom 2023-01-12
https://access.redhat.com/errata/RHSA-2023:0017
Red Hat Security Advisory RHSA-2022:9110 vom 2023-01-06
https://access.redhat.com/errata/RHSA-2022:9110
Red Hat Security Advisory RHSA-2022:9111 vom 2023-01-06
https://access.redhat.com/errata/RHSA-2022:9111
Jenkins Security Advisory vom 2022-06-22
https://www.jenkins.io/security/advisory/2022-06-22/
Red Hat Security Advisory RHSA-2022:6531 vom 2022-09-21
https://access.redhat.com/errata/RHSA-2022:6531