GHSA-5phj-qv74-pv4w

ghsaUSosv

Missing permission check in Jenkins GitLab Plugin

view advisory published 2022-05-18Licence: CC-BY-4.0

Jenkins GitLab Plugin 1.5.31 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. An enumeration of credentials IDs in GitLab Plugin 1.5.32 requires the appropriate permissions.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-30955US	medium6.5OT elevated	0.90% (59th)	—	2022-05-17
Jenkins GitLab Plugin 1.5.31 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of cr…

references

External citations — patches, advisories, analysis.

https://github.com/jenkinsci/gitlab-pluginPACKAGE
https://github.com/jenkinsci/gitlab-plugin/commit/37e48ca920a4779109b885f4de62111e0baf846aWEB
https://nvd.nist.gov/vuln/detail/CVE-2022-30955ADVISORY
https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2753WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan