Description

Jenkins CloudBees AWS Credentials Plugin 1.28 and earlier does not perform a permission check in a helper method for HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of AWS credentials stored in Jenkins in some circumstances.

Remediation

References

http://www.openwall.com/lists/oss-security/2021/03/18/5

https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2032

Related Vulnerabilities

CVE-2023-47324 Vulnerability in maven package org.silverpeas.core:silverpeas-core-rs

CVE-2023-26140 Vulnerability in npm package @excalidraw/excalidraw

CVE-2023-3894 Vulnerability in maven package com.fasterxml.jackson.dataformat:jackson-dataformat-toml

CVE-2020-2153 Vulnerability in maven package org.jenkins-ci.plugins:backlog

CVE-2022-36098 Vulnerability in maven package org.xwiki.platform:xwiki-platform-mentions-ui

Severity

Medium

Classification

CWE-862 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Third Party Advisory Vendor Advisory