Password stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin
Jenkins OpenId Connect Authentication Plugin stores a password of a local user account used as an anti-lockout feature in a recoverable format, allowing attackers with access to the Jenkins controller file system to recover the plain text password of that account, likely gaining administrator access to Jenkins.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-50770US | medium6.7OT elevated | — | ||
Jenkins OpenId Connect Authentication Plugin 2.6 and earlier stores a password of a local user account used as an anti-lockout feature in a recoverable format, allowing attackers w… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2023/12/13/4WEB
- https://github.com/jenkins-infra/update-center2/pull/773WEB
- https://github.com/jenkinsci/oic-auth-pluginPACKAGE
- https://github.com/jenkinsci/oic-auth-plugin/issues/259WEB
- https://github.com/jenkinsci/oic-auth-plugin/pull/287WEB
- https://nvd.nist.gov/vuln/detail/CVE-2023-50770ADVISORY
- https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3168WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan