High WID-SEC-2023-0397 11 CVEs

Jenkins: Mehrere Schwachstellen

Published Feb 15, 2023 · Updated Feb 11, 2024 · Revision 5 · de-DE

Vendor: Jenkins Project Vendor: Red Hat Product: Enterprise Linux Product: Jenkins Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.

Product

Jenkins ist ein erweiterbarer, webbasierter Integration Server zur kontinuierlichen Unterstützung bei Softwareentwicklungen aller Art.

Vulnerabilities 11

Critical 9.9

CVE-2023-25765

Sandbox escape in Jenkins Email Extension Plugin

In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Script Security protection, allowing attackers able to define email templates in folders to bypass the sandbox protection and execute arbitrary code in t…

Jenkins Project Jenkins Email Extension Plugin org.jenkins-ci.plugins:email-ext Web / CMS Maven

Feb 15, 2023
High 8.8

CVE-2023-25767

Cross-Site Request Forgery in Jenkins Azure Credentials Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers to connect to an attacker-specified web server.

Jenkins Project Jenkins Azure Credentials Plugin org.jenkins-ci.plugins:azure-credentials Web / CMS Maven

Feb 15, 2023
Medium 6.5

CVE-2023-25768

Missing Authorization in Jenkins Azure Credentials Plugin

A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server.

Jenkins Project Jenkins Azure Credentials Plugin org.jenkins-ci.plugins:azure-credentials Web / CMS Maven

Feb 15, 2023
Medium 5.4

CVE-2023-25761

Cross-site Scripting in Jenkins JUnit Plugin

Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control test case class names in the JUnit re…

Jenkins Project Jenkins JUnit Plugin org.jenkins-ci.plugins:junit Web / CMS Maven

Feb 15, 2023
Medium 5.4

CVE-2023-25762 EPSS 82%

Cross-site Scripting in Jenkins Pipeline: Build Step Plugin

Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names.

Jenkins Project Jenkins Pipeline: Build Step Plugin org.jenkins-ci.plugins:pipeline-build-step Web / CMS Maven

Feb 15, 2023
Medium 5.4

CVE-2023-25763

Cross-site Scripting in Jenkins Email Extension Plugin

Jenkins Email Extension Plugin 2.93 and earlier does not escape various fields included in bundled email templates, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control affected fields.

Jenkins Project Jenkins Email Extension Plugin org.jenkins-ci.plugins:email-ext Web / CMS Maven

Feb 15, 2023
Medium 5.4

CVE-2023-25764

Cross-site Scripting in Jenkins Email Extension Plugin

Jenkins Email Extension Plugin 2.93 and earlier does not escape, sanitize, or sandbox rendered email template output or log output generated during template rendering, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers abl…

Jenkins Project Jenkins Email Extension Plugin org.jenkins-ci.plugins:email-ext Web / CMS Maven

Feb 15, 2023
Medium 4.3

CVE-2023-23848

CSRF vulnerability in Jenkins Coverity Plugin allow capturing credentials

Missing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing cr…

Synopsys Synopsys Jenkins Coverity Plugin org.jenkins-ci.plugins:synopsys-coverity Web / CMS Maven

Feb 15, 2023
Medium 4.3

CVE-2023-23850

Synopsys Jenkins Coverity Plugin has Incorrect Default Permissions

A missing permission check in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Synopsys Synopsys Jenkins Coverity Plugin org.jenkins-ci.plugins:synopsys-coverity Web / CMS Maven

Feb 15, 2023
Medium 4.3

CVE-2023-25766

Missing Authorization in Jenkins Azure Credentials Plugin

A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Jenkins Project Jenkins Azure Credentials Plugin org.jenkins-ci.plugins:azure-credentials Web / CMS Maven

Feb 15, 2023
Low 3.5

CVE-2023-23847

CSRF vulnerability in Synopsys Jenkins Coverity Plugin

A cross-site request forgery (CSRF) vulnerability in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing creden…

Synopsys Synopsys Jenkins Coverity Plugin org.jenkins-ci.plugins:synopsys-coverity Web / CMS Maven

Feb 15, 2023

Revision history

2024-02-11 #5
Neue Updates von Red Hat aufgenommen
2023-05-24 #4
Neue Updates von Red Hat aufgenommen
2023-05-18 #3
Neue Updates von Red Hat aufgenommen
2023-04-25 #2
Neue Updates von Red Hat aufgenommen
2023-02-15 #1
Initiale Fassung

References

Jenkins Security Advisory 2023-02-15 vom 2023-02-15
https://www.jenkins.io/security/advisory/2023-02-15/
Red Hat Security Advisory RHSA-2023:1866 vom 2023-04-26
https://access.redhat.com/errata/RHSA-2023:1866
Red Hat Security Advisory RHSA-2023:3198 vom 2023-05-18
https://access.redhat.com/errata/RHSA-2023:3198
Red Hat Security Advisory RHSA-2023:3195 vom 2023-05-19
https://access.redhat.com/errata/RHSA-2023:3195
Red Hat Security Advisory RHSA-2023:3299 vom 2023-05-24
https://access.redhat.com/errata/RHSA-2023:3299
Red Hat Security Advisory RHSA-2024:0777 vom 2024-02-12
https://access.redhat.com/errata/RHSA-2024:0777
Red Hat Security Advisory RHSA-2024:0776 vom 2024-02-12
https://access.redhat.com/errata/RHSA-2024:0776
Red Hat Security Advisory RHSA-2024:0778 vom 2024-02-12
https://access.redhat.com/errata/RHSA-2024:0778
Red Hat Security Advisory RHSA-2024:0775 vom 2024-02-12
https://access.redhat.com/errata/RHSA-2024:0775