DeutschShown in its original language — a full translation is planned for a future version.
Jenkins Plugins: Mehrere Schwachstellen
view advisory published 2023-01-24
Ein entfernter, anonymer oder angemeldeter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.
01
describes (38)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-24459US | medium6.5OT elevated | — | ||
A missing permission check in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL. | ||||
| CVE-2023-24458US | high8.8 | — | ||
A cross-site request forgery (CSRF) vulnerability in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified URL. | ||||
| CVE-2023-24457US | medium6.5 | — | ||
A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows attackers to trick users into logging in to the attacker's acco… | ||||
| CVE-2023-24456US | critical9.8 | — | ||
Jenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on login. | ||||
| CVE-2023-24455US | medium4.3 | — | ||
Jenkins visualexpert Plugin 1.3 and earlier does not restrict the names of files in methods implementing form validation, allowing attackers with Item/Configure permission to check… | ||||
| CVE-2023-24454US | medium5.5OT elevated | — | ||
Jenkins TestQuality Updater Plugin 1.3 and earlier stores the TestQuality Updater password unencrypted in its global configuration file on the Jenkins controller where it can be vi… | ||||
| CVE-2023-24453US | medium6.5OT elevated | — | ||
A missing check in Jenkins TestQuality Updater Plugin 1.3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified… | ||||
| CVE-2023-24452US | high8.8 | — | ||
A cross-site request forgery (CSRF) vulnerability in Jenkins TestQuality Updater Plugin 1.3 and earlier allows attackers to connect to an attacker-specified URL using attacker-spec… | ||||
| CVE-2023-24451US | medium4.3OT elevated | — | ||
A missing permission check in Jenkins Cisco Spark Notifier Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored… | ||||
| CVE-2023-24450US | medium6.5OT elevated | — | ||
Jenkins view-cloner Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permi… | ||||
| CVE-2023-24449US | medium4.3 | — | ||
Jenkins PWauth Security Realm Plugin 0.4 and earlier does not restrict the names of files in methods implementing form validation, allowing attackers with Overall/Read permission t… | ||||
| CVE-2023-24448US | medium6.5OT elevated | — | ||
A missing permission check in Jenkins RabbitMQ Consumer Plugin 2.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified AMQP(S) URL using a… | ||||
| CVE-2023-24447US | high8.8 | — | ||
A cross-site request forgery (CSRF) vulnerability in Jenkins RabbitMQ Consumer Plugin 2.8 and earlier allows attackers to connect to an attacker-specified AMQP(S) URL using attacke… | ||||
| CVE-2023-24446US | high8.8 | — | ||
A cross-site request forgery (CSRF) vulnerability in Jenkins OpenID Plugin 2.4 and earlier allows attackers to trick users into logging in to the attacker's account. | ||||
| CVE-2023-24445US | medium6.1 | — | ||
Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins. | ||||
| CVE-2023-24444US | critical9.8 | — | ||
Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login. | ||||
| CVE-2023-24443US | critical9.8 | — | ||
Jenkins TestComplete support Plugin 2.8.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. | ||||
| CVE-2023-24442US | medium5.5OT elevated | — | ||
Jenkins GitHub Pull Request Coverage Status Plugin 2.2.0 and earlier stores the GitHub Personal Access Token, Sonar access token and Sonar password unencrypted in its global config… | ||||
| CVE-2023-24441US | critical9.8 | — | ||
Jenkins MSTest Plugin 1.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. | ||||
| CVE-2023-24440US | medium5.5OT elevated | — | ||
Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier transmits the private key in plain text as part of the global Jenkins configuration form, potentially resulting… | ||||
showing 20 of 38
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2023:1655 vom 2023-04-12external
- Red Hat Security Advisory RHSA-2023:3195 vom 2023-05-19external
- Red Hat Security Advisory RHSA-2023:3198 vom 2023-05-18external
- Red Hat Security Advisory RHSA-2023:3299 vom 2023-05-24external
- Red Hat Security Advisory RHSA-2023:3610 vom 2023-06-15external
- Red Hat Security Advisory RHSA-2023:6171 vom 2023-10-30external
- Red Hat Security Advisory RHSA-2023:6172 vom 2023-10-30external
- Red Hat Security Advisory RHSA-2023:6179 vom 2023-10-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan