Description

A missing permission check in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfig#doTestConnection form validation method allowed attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Remediation

References

http://www.securityfocus.com/bid/108045

https://jenkins.io/security/advisory/2019-04-17/#SECURITY-1357

Related Vulnerabilities

CVE-2023-46589 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core

CVE-2019-1003045 Vulnerability in maven package de.eacg:ecs-publisher

CVE-2019-10284 Vulnerability in maven package org.jenkins-ci.plugins:diawi-upload

CVE-2019-10357 Vulnerability in maven package org.jenkins-ci.plugins.workflow:workflow-cps-global-lib

CVE-2018-18853 Vulnerability in maven package io.spray:spray-json_2.10

Severity

Critical

Classification

CWE-862 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Third Party Advisory VDB Entry Vendor Advisory