High WID-SEC-2024-3456 7 CVEs

Jenkins Plugins: Mehrere Schwachstellen

Published Nov 13, 2024 · Updated Mar 4, 2025 · Revision 2 · de-DE

Vendor: Jenkins Project Vendor: Red Hat Product: Enterprise Linux Product: Jenkins Platform: Windows

Summary

Ein entfernter authentisierter Angreifer oder ein anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen preiszugeben, beliebigen Code auszuführen, sich erhöhte Rechte zu verschaffen und einen Cross-Site-Scripting-Angriff durchzuführen.

Product

Jenkins ist ein erweiterbarer, webbasierter Integration Server zur kontinuierlichen Unterstützung bei Softwareentwicklungen aller Art.

Vulnerabilities 7

High 8.8

CVE-2024-52553

Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin

Jenkins OpenId Connect Authentication Plugin 4.418.vccc7061f5b_6d and earlier does not invalidate the previous session on login.

Jenkins Project Jenkins OpenId Connect Authentication Plugin org.jenkins-ci.plugins:oic-auth Web / CMS Maven

Nov 13, 2024
High 8.8

CVE-2024-52554

Script security bypass vulnerability in Jenkins Shared Library Version Override Plugin

Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to conf…

Jenkins Project Jenkins Shared Library Version Override Plugin io.jenkins.plugins:shared-library-version-override Web / CMS Maven

Nov 13, 2024
High 8.2

CVE-2022-46751

Apache Ivy: XML External Entity vulnerability in Apache Ivy

Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This issue affects any version of Apache Ivy prior to 2.5.2. When Apache Ivy prior to 2.5.2 parses XML file…

Apache Software Foundation Apache Ivy gradle-8 gradle-stage0 Wolfi Maven

Aug 21, 2023
High 8.0

CVE-2024-52550 Public exploit

Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin

Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build who…

Jenkins Project Jenkins Pipeline: Groovy Plugin org.jenkins-ci.plugins.workflow:workflow-cps Web / CMS Maven

Nov 13, 2024
High 8.0

CVE-2024-52551

Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin

Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous buil…

Jenkins Project Jenkins Pipeline: Declarative Plugin org.jenkinsci.plugins:pipeline-model-parent Web / CMS Maven

Nov 13, 2024
High 8.0

CVE-2024-52552

Stored XSS vulnerability in Jenkins Authorize Project Plugin

Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Jenkins Project Jenkins Authorize Project Plugin org.jenkins-ci.plugins:authorize-project Web / CMS Maven

Nov 13, 2024
Medium 4.3

CVE-2024-52549

Missing permission check in Jenkins Script Security Plugin

Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to ch…

Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven

Nov 13, 2024

Revision history

2025-03-04 #2
Neue Updates von Red Hat aufgenommen
2024-11-13 #1
Initiale Fassung

References

Jenkins Security Advisory vom 2024-11-13
https://www.jenkins.io/security/advisory/2024-11-13/
Red Hat Security Advisory RHSA-2025:2222 vom 2025-03-04
https://access.redhat.com/errata/RHSA-2025:2222
Red Hat Security Advisory RHSA-2025:2218 vom 2025-03-04
https://access.redhat.com/errata/RHSA-2025:2218
Red Hat Security Advisory RHSA-2025:2219 vom 2025-03-04
https://access.redhat.com/errata/RHSA-2025:2219
Red Hat Security Advisory RHSA-2025:2220 vom 2025-03-04
https://access.redhat.com/errata/RHSA-2025:2220
Red Hat Security Advisory RHSA-2025:2221 vom 2025-03-04
https://access.redhat.com/errata/RHSA-2025:2221
Red Hat Security Advisory RHSA-2025:2223 vom 2025-03-04
https://access.redhat.com/errata/RHSA-2025:2223