High WID-SEC-2024-3071 5 CVEs

Jenkins: Mehrere Schwachstellen

Published Oct 3, 2024 · Updated Nov 5, 2024 · Revision 2 · de-DE

Vendor: Jenkins Project Vendor: Red Hat Product: Enterprise Linux Product: Jenkins Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Jenkins und verschiedenen Jenkins Plugins ausnutzen, um Informationen offenzulegen Sicherheitsvorkehrungen zu umgehen oder seine Rechte zu erweitern.

Product

Jenkins ist ein erweiterbarer, webbasierter Integration Server zur kontinuierlichen Unterstützung bei Softwareentwicklungen aller Art.

Vulnerabilities 5

High 8.1

CVE-2024-47806

Jenkins OpenId Connect Authentication Plugin lacks audience claim validation

Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `aud` (Audience) claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administrator access to Jenkins.

Jenkins Project Jenkins OpenId Connect Authentication Plugin org.jenkins-ci.plugins:oic-auth Web / CMS Maven

Oct 2, 2024
High 8.1

CVE-2024-47807

Jenkins OpenId Connect Authentication Plugin lacks issuer claim validation

Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `iss` (Issuer) claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administrator access to Jenkins.

Jenkins Project Jenkins OpenId Connect Authentication Plugin org.jenkins-ci.plugins:oic-auth Web / CMS Maven

Oct 2, 2024
High 7.5

CVE-2024-47805

Jenkins Credentials plugin reveals encrypted values of credentials to users with Extended Read permission

Jenkins Credentials Plugin 1380.va_435002fa_924 and earlier, except 1371.1373.v4eb_fa_b_7161e9, does not redact encrypted values of credentials using the `SecretBytes` type when accessing item `config.xml` via REST API or CLI.

Jenkins Project Jenkins Credentials Plugin org.jenkins-ci.plugins:credentials Web / CMS Maven

Oct 2, 2024
Medium 4.3

CVE-2024-47803

Jenkins exposes multi-line secrets through error messages

Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven

Oct 2, 2024
Medium 4.3

CVE-2024-47804

Jenkins item creation restriction bypass vulnerability

If an attempt is made to create an item of a type prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API and either of these checks fail, Jenkins 2.478 and earlier, LTS 2.462.2 an…

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven

Oct 2, 2024

Revision history

2024-11-05 #2
Neue Updates von Red Hat aufgenommen
2024-10-03 #1
Initiale Fassung

References

Jenkins Security Advisory 2024-10-02 vom 2024-10-03
https://www.jenkins.io/security/advisory/2024-10-02/
Red Hat Security Advisory RHSA-2024:8887 vom 2024-11-05
https://access.redhat.com/errata/RHSA-2024:8887
Red Hat Security Advisory RHSA-2024:8884 vom 2024-11-05
https://access.redhat.com/errata/RHSA-2024:8884
Red Hat Security Advisory RHSA-2024:8885 vom 2024-11-05
https://access.redhat.com/errata/RHSA-2024:8885
Red Hat Security Advisory RHSA-2024:8886 vom 2024-11-05
https://access.redhat.com/errata/RHSA-2024:8886