GitHub Advisoryadvisory · Maven

GHSA-jm4g-8rvq-v87j Incorrect permission check in XebiaLabs XL Deploy Plugin allows capturing credentials

MEDIUM Published 2022-05-24 Modified 2023-12-21 Official page ↗
Aliases
CVE-2021-21664
Ecosystem
Maven
Packages
com.xebialabs.deployit.ci:deployit-plugin
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-863
Reviewed
2022-12-14

Affected packages

• Maven com.xebialabs.deployit.ci:deployit-plugin: < 10.0.2 → fixed in 10.0.2

Description

An incorrect permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Generic Create permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in Jenkins. The permission check was partially fixed in XebiaLabs XL Deploy Plugin 7.5.9: A permission check was added, but for the wrong permission, still allowing some non-admin users to access the form validation method.

Related

Alias · CVE (1)

  • CVE-2021-21664 An incorrect permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Generic Create permission to… vulnerability

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References