GitHub Advisoryadvisory · Maven

GHSA-8wgf-3mrj-73x7 Incorrect permission checks in Qualys Web App Scanning Connector Plugin allow capturing credentials

MEDIUM Published 2023-07-26 Modified 2023-07-31 Official page ↗
Aliases
CVE-2023-39154
Ecosystem
Maven
Packages
com.qualys.plugins:qualys-was
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-863
Reviewed
2023-07-26

Affected packages

• Maven com.qualys.plugins:qualys-was: < 2.0.11 → fixed in 2.0.11

Description

Qualys Web App Scanning Connector Plugin 2.0.10 and earlier does not correctly perform permission checks in several HTTP endpoints. This allows attackers with global Item/Configure permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Qualys Web App Scanning Connector Plugin 2.0.11 requires the appropriate permissions for the affected HTTP endpoints.

Related

Alias · CVE (1)

  • CVE-2023-39154 Incorrect permission checks in Jenkins Qualys Web App Scanning Connector Plugin 2.0.10 and earlier allow attackers with global… vulnerability

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References