GitHub Advisoryadvisory · Maven

GHSA-fpw7-8gjc-jwqj Cache confusion in Jenkins Eiffel Broadcaster Plugin

MEDIUM Published 2025-01-22 Modified 2025-03-20 Official page ↗
Aliases
CVE-2025-24400
Ecosystem
Maven
Packages
com.axis.jenkins.plugins.eiffel:eiffel-broadcaster
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-276, CWE-863
Reviewed
2025-01-22

Affected packages

• Maven com.axis.jenkins.plugins.eiffel:eiffel-broadcaster: >= 2.8.0, < 2.10.3 → fixed in 2.10.3

Description

The Jenkins Eiffel Broadcaster Plugin allows events published to RabbitMQ to be signed using certificate credentials. To improve performance, the plugin caches some data from the credential. Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 (both inclusive) uses the credential ID as the cache key. This allows attackers able to create a credential with the same ID as a legitimate one in a different credentials store, to sign an event published to RabbitMQ with the legitimate certificate credentials. Eiffel Broadcaster Plugin 2.10.3 removes the cache.

Related

Alias · CVE (1)

  • CVE-2025-24400 Jenkins Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 (both inclusive) uses the credential ID as the cache key during signing operations,… vulnerability

Weakness · CWE (2)

  • CWE-276 Incorrect Default Permissions weakness
  • CWE-863 Incorrect Authorization weakness

References