GitHub Advisoryadvisory · Maven

GHSA-g2r3-4g8q-h5rj Missing authorization in Jenkins Kubernetes Plugin

MEDIUM Published 2022-05-24 Modified 2023-05-24 Official page ↗
Aliases
CVE-2020-2309
Ecosystem
Maven
Packages
org.csanchez.jenkins.plugins:kubernetes
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-862
Reviewed
2022-06-24

Affected packages

• Maven org.csanchez.jenkins.plugins:kubernetes: >= 1.27.0, < 1.27.4 → fixed in 1.27.4 • Maven org.csanchez.jenkins.plugins:kubernetes: >= 1.26.0, < 1.26.5 → fixed in 1.26.5 • Maven org.csanchez.jenkins.plugins:kubernetes: >= 1.22.0, < 1.25.4.1 → fixed in 1.25.4.1 • Maven org.csanchez.jenkins.plugins:kubernetes: < 1.21.6 → fixed in 1.21.6

Description

Jenkins Kubernetes Plugin prior to 1.27.4, 1.26.5, 1.25.4.1, and 1.21.6 does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability. An enumeration of credentials IDs in Kubernetes Plugin 1.27.4, 1.26.5, 1.25.4.1, and 1.21.6 requires the appropriate permissions.

Related

Alias · CVE (1)

  • CVE-2020-2309 A missing/An incorrect permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to… vulnerability

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References