GitHub Advisoryadvisory · Maven

GHSA-grf8-94q5-4phx CSRF vulnerability and missing permission checks in Openstack Cloud Plugin allowed capturing credentials

HIGH Published 2022-05-13 Modified 2023-12-15 Official page ↗
Aliases
CVE-2018-1000603
Ecosystem
Maven
Packages
org.jenkins-ci.plugins:openstack-cloud
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-200
Reviewed
2023-12-15

Affected packages

• Maven org.jenkins-ci.plugins:openstack-cloud: < 2.37 → fixed in 2.37

Description

A exposure of sensitive information vulnerability exists in Jenkins Openstack Cloud Plugin 2.35 and earlier in BootSource.java, InstancesToRun.java, JCloudsCleanupThread.java, JCloudsCloud.java, JCloudsComputer.java, JCloudsPreCreationThread.java, JCloudsRetentionStrategy.java, JCloudsSlave.java, JCloudsSlaveTemplate.java, LauncherFactory.java, OpenstackCredentials.java, OpenStackMachineStep.java, SlaveOptions.java, SlaveOptionsDescriptor.java that allows attackers with Overall/Read access to Jenkins to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins, and to cause Jenkins to submit HTTP requests to attacker-specified URLs.

Related

Alias · CVE (1)

  • CVE-2018-1000603 A exposure of sensitive information vulnerability exists in Jenkins Openstack Cloud Plugin 2.35 and earlier in BootSource.java,… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References