Medium WID-SEC-2023-3030 7 CVEs

Jenkins Plugins: Mehrere Schwachstellen

Published Nov 29, 2023 · Updated Nov 30, 2023 · Revision 2 · de-DE

Vendor: Jenkins Project Product: Jenkins Product: Jenkins Google Compute Engine Plugin < 4.551.v5a_4dc98f6962 Product: Jenkins Jira Plugin < 3.12 Product: Jenkins MATLAB Plugin < 2.11.1 Product: Jenkins NeuVector Vulnerability Scanner Plugin < 2.2 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Informationen offenzulegen, seine Privilegien zu erweitern oder Dateien zu manipulieren.

Product

Jenkins ist ein erweiterbarer, webbasierter Integration Server zur kontinuierlichen Unterstützung bei Softwareentwicklungen aller Art.

Vulnerabilities 7

High 8.8

CVE-2023-49673

Jenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerability

A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and password.

Jenkins Project Jenkins NeuVector Vulnerability Scanner Plugin io.jenkins.plugins:neuvector-vulnerability-scanner Web / CMS Maven

Nov 29, 2023
High 7.1

CVE-2023-49654

Jenkins MATLAB Plugin missing permission checks

Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins controller file system.

Jenkins Project Jenkins MATLAB Plugin org.jenkins-ci.plugins:matlab Web / CMS Maven

Nov 29, 2023
High 7.1

CVE-2023-49655

Jenkins MATLAB Plugin cross-site request forgery vulnerability

A cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have Jenkins parse an XML file from the Jenkins controller file system.

Jenkins Project Jenkins MATLAB Plugin org.jenkins-ci.plugins:matlab Web / CMS Maven

Nov 29, 2023
High 7.1

CVE-2023-49656

Jenkins MATLAB Plugin XML External Entity vulnerability

Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins Project Jenkins MATLAB Plugin org.jenkins-ci.plugins:matlab Web / CMS Maven

Nov 29, 2023
Medium 4.3

CVE-2023-49652

Jenkins Google Compute Engine Plugin has incorrect permission checks

Incorrect permission checks in Jenkins Google Compute Engine Plugin 4.550.vb_327fca_3db_11 and earlier allow attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate system-scoped credentials…

Jenkins Project Jenkins Google Compute Engine Plugin org.jenkins-ci.plugins:google-compute-engine Web / CMS Maven

Nov 29, 2023
Medium 4.3

CVE-2023-49653

Jenkins Jira Plugin vulnerable to exposure of system-scoped credentials

Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.

Jenkins Project Jenkins JIRA Plugin org.jenkins-ci.plugins:jira Web / CMS Maven

Nov 29, 2023
Medium 4.3

CVE-2023-49674

Jenkins NeuVector Vulnerability Scanner Plugin missing permission check

A missing permission check in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password.

Jenkins Project Jenkins NeuVector Vulnerability Scanner Plugin io.jenkins.plugins:neuvector-vulnerability-scanner Web / CMS Maven

Nov 29, 2023

Revision history

2023-11-30 #2
Anpassung im Text
2023-11-29 #1
Initiale Fassung

References

Jenkins Security Advisory vom 2023-11-29
https://www.jenkins.io/security/advisory/2023-11-29/