Medium WID-SEC-2023-0609 9 CVEs

Jenkins: Mehrere Schwachstellen

Published Mar 8, 2023 · Updated Feb 11, 2024 · Revision 7 · de-DE

Vendor: Jenkins Project Vendor: Red Hat Product: Enterprise Linux Product: Jenkins Product: openshift Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen und Code auszuführen

Product

Jenkins ist ein erweiterbarer, webbasierter Integration Server zur kontinuierlichen Unterstützung bei Softwareentwicklungen aller Art.

Vulnerabilities 9

Critical 9.6

CVE-2023-27898

Cross-site Scripting vulnerability in Jenkins

Jenkins 2.270 through 2.393 (both inclusive), LTS 2.277.1 through 2.375.3 (both inclusive) does not escape the Jenkins version a plugin depends on when rendering the error message stating its incompatibility with the current version of Jenkins, resulting in a…

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven

Mar 8, 2023
Critical 9.6

CVE-2023-27905

Cross site scripting vulnerability in update-center2

Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a plugin for hosting.

Jenkins Project Jenkins update-center2 org.jenkins-ci:update-center2 Web / CMS Maven

Mar 8, 2023
High 7.5

CVE-2023-24998 Public exploit EPSS 49%

Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts

Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new c…

Apache Software Foundation Apache Tomcat Apache Commons FileUpload tomcat9 Debian Ubuntu Maven

Feb 20, 2023
High 7.5

CVE-2023-27900

Denial of service in Jenkins Core

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in hudson.util.MultipartFormDataParser, allowing attackers to …

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven

Mar 8, 2023
High 7.5

CVE-2023-27901

Denial of service in Jenkins Core

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in org.kohsuke.stapler.RequestImpl, allowing attackers to trig…

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven

Mar 8, 2023
High 7.0

CVE-2023-27899

Incorrect Authorization in Jenkins Core

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a plugin for installation, potentially allowing attackers with access to the Jen…

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven

Mar 8, 2023
Medium 5.3

CVE-2023-27904

Information disclosure through error stack traces related to agents

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connections are broken, potentially revealing information about Jenkins configuration that is otherwise inaccessible to attackers.

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven

Mar 8, 2023
Medium 4.4

CVE-2023-27903

Incorrect Authorization in Jenkins Core

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a file parameter through the CLI, potentially allowing attackers with access to …

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven

Mar 8, 2023
Medium 4.3

CVE-2023-27902

Incorrect Permission Preservation in Jenkins Core

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier shows temporary directories related to job workspaces, which allows attackers with Item/Workspace permission to access their contents.

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven

Mar 8, 2023

Revision history

2024-02-11 #7
Neue Updates von Red Hat aufgenommen
2023-06-19 #6
Neue Updates von Red Hat aufgenommen
2023-06-15 #5
Neue Updates von Red Hat aufgenommen
2023-05-24 #4
Neue Updates von Red Hat aufgenommen
2023-05-18 #3
Neue Updates von Red Hat aufgenommen
2023-04-12 #2
Neue Updates von Red Hat aufgenommen
2023-03-08 #1
Initiale Fassung

References

Jenkins Security Advisory vom 2023-03-08
https://www.jenkins.io/security/advisory/2023-03-08/
Red Hat Security Advisory RHSA-2023:1655 vom 2023-04-12
https://access.redhat.com/errata/RHSA-2023:1655
Red Hat Security Advisory RHSA-2023:3195 vom 2023-05-19
https://access.redhat.com/errata/RHSA-2023:3195
Red Hat Security Advisory RHSA-2023:3198 vom 2023-05-18
https://access.redhat.com/errata/RHSA-2023:3198
Red Hat Security Advisory RHSA-2023:3299 vom 2023-05-24
https://access.redhat.com/errata/RHSA-2023:3299
Red Hat Security Advisory RHSA-2023:3622 vom 2023-06-15
https://access.redhat.com/errata/RHSA-2023:3622
Red Hat Security Advisory RHSA-2023:3663 vom 2023-06-19
https://access.redhat.com/errata/RHSA-2023:3663
Red Hat Security Advisory RHSA-2024:0775 vom 2024-02-12
https://access.redhat.com/errata/RHSA-2024:0775
Red Hat Security Advisory RHSA-2024:0778 vom 2024-02-12
https://access.redhat.com/errata/RHSA-2024:0778