High WID-SEC-2024-1018 5 CVEs

Jenkins: Mehrere Schwachstellen

Published May 2, 2024 · Updated Nov 5, 2024 · Revision 4 · de-DE

Vendor: Jenkins Project Vendor: Red Hat Product: Enterprise Linux Product: Jenkins Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code im Kontext des Dienstes auszuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.

Product

Jenkins ist ein erweiterbarer, webbasierter Integration Server zur kontinuierlichen Unterstützung bei Softwareentwicklungen aller Art.

Vulnerabilities 5

Critical 9.8

CVE-2024-34144 Public exploit EPSS 48%

Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodies

A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection a…

Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven

May 2, 2024
High 8.8

CVE-2024-34145

Jenkins Script Security Plugin sandbox bypass vulnerability

A sandbox bypass vulnerability involving sandbox-defined classes that shadow specific non-sandbox-defined classes in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define and run sandboxed scripts, including…

Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven

May 2, 2024
Medium 6.8

CVE-2024-34148

Jenkins Subversion Partial Release Manager Plugin programmatically disables the fix for CVE-2016-3721

Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for CVE-2016-3721 whenever a build is triggered from a release tag, by setting the Java system property 'hudson.model.ParametersAction.keepUndefinedParameter…

Jenkins Project Jenkins Subversion Partial Release Manager Plugin org.jenkins-ci.plugins:partial-release-manager Web / CMS Maven

May 2, 2024
Medium 6.5

CVE-2024-34146

Jenkins Git server Plugin does not perform a permission check

Jenkins Git server Plugin 114.v068a_c7cc2574 and earlier does not perform a permission check for read access to a Git repository over SSH, allowing attackers with a previously configured SSH public key but lacking Overall/Read permission to access these repos…

Jenkins Project Jenkins Git server Plugin org.jenkins-ci.plugins:git-server Web / CMS Maven

May 2, 2024
Medium 4.3

CVE-2024-34147

Jenkins Telegram Bot Plugin stores the Telegram Bot token in plaintext

Jenkins Telegram Bot Plugin 1.4.0 and earlier stores the Telegram Bot token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

Jenkins Project Jenkins Telegram Bot Plugin org.jenkins-ci.plugins:telegrambot Web / CMS Maven

May 2, 2024

Revision history

2024-11-05 #4
Neue Updates von Red Hat aufgenommen
2024-07-21 #3
Neue Updates von Red Hat aufgenommen
2024-06-05 #2
Neue Updates von Red Hat aufgenommen
2024-05-02 #1
Initiale Fassung

References

Jenkins Security Advisory vom 2024-05-02
https://www.jenkins.io/security/advisory/2024-05-02/
Red Hat Security Advisory RHSA-2024:3634 vom 2024-06-05
https://access.redhat.com/errata/RHSA-2024:3634
Red Hat Security Advisory RHSA-2024:3636 vom 2024-06-05
https://access.redhat.com/errata/RHSA-2024:3636
Red Hat Security Advisory RHSA-2024:4597 vom 2024-07-19
https://access.redhat.com/errata/RHSA-2024:4597
Red Hat Security Advisory RHSA-2024:8886 vom 2024-11-05
https://access.redhat.com/errata/RHSA-2024:8886