GitHub Advisoryadvisory · Maven

GHSA-qq38-mxpq-rrpj Improper authorization of users and groups with the same base name in Jenkins GitLab Authentication Plugin

HIGH Published 2022-05-24 Modified 2022-12-28 Official page ↗
Aliases
CVE-2020-2228
Ecosystem
Maven
Packages
org.jenkins-ci.plugins:gitlab-oauth
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-863
Reviewed
2022-12-28

Affected packages

• Maven org.jenkins-ci.plugins:gitlab-oauth: < 1.6 → fixed in 1.6

Description

GitLab Authentication Plugin 1.5 and earlier does not differentiate between user names and hierarchical group names when performing authorization. This allows an attacker with permissions to create groups in GitLab to gain the privileges granted to another user or group. GitLab Authentication Plugin 1.6 performs user name and group name authorization checks using the appropriate GitLab APIs.

Related

Alias · CVE (1)

  • CVE-2020-2228 Jenkins Gitlab Authentication Plugin 1.5 and earlier does not perform group authorization checks properly, resulting in a privilege… vulnerability

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References