Threat database

Jenkins Sauce OnDemand Plugin versions 2.2.0 and earlier contain a vulnerability due to missing permission checks. This flaw allows users with Overall/Read permission to enumerate credential IDs stored in Jenkins. The vulnerability has a CVSS score of 4.3, indicating medium severity. No official patch or remediation guidance is currently provided by the vendor.

A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Jenkins Horreum Plugin 0.16.162.v33b_4a_a_b_5f828 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to have Jenkins send credentials they are not entitled to use to the administrator-configured Horreum URL.

Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to use.

Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Create or Item/Configure permission.

Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user-controlled field values in a JavaScript context, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing attackers lacking appropriate permissions to invoke the conversion functionality.

A vulnerability in Jenkins Parameterized Remote Trigger Plugin versions 3.2.2 and earlier allows attackers with Overall/Read permission to enumerate credential IDs due to a missing permission check. This issue has a medium severity rating with a CVSS score of 4.3 and does not impact integrity or availability. No official patch or remediation guidance is currently provided by the vendor.

A timing attack vulnerability exists in Jenkins Webhook Secret Credentials Provider Plugin versions 16.v0cfa_f0215cf5 and earlier. The plugin does not use a constant-time comparison function when verifying webhook bearer tokens, which could allow attackers to infer valid tokens through statistical analysis. The vulnerability has a low CVSS score of 3.7 and does not impact integrity or availability.

Jenkins External Workspace Manager Plugin versions 1.4.1 and earlier contain a vulnerability where permission checks are missing or improperly implemented, allowing users with Overall/Read permission to access files in workspaces they should not be authorized to read. This issue affects versions prior to 1.4.2 and has a medium severity rating.

A missing permission check vulnerability exists in Jenkins SCM-Manager Plugin versions 1.11.1 and earlier. This flaw allows attackers with Overall/Read permission to connect to attacker-controlled URLs using credentials IDs obtained by other means, potentially exposing stored Jenkins credentials. The vulnerability has a medium severity rating with a CVSS score of 4.2.

A cross-site request forgery (CSRF) vulnerability exists in Jenkins SCM-Manager Plugin version 1.11.1 and earlier. This flaw allows attackers to use attacker-specified credentials IDs obtained by other means to connect to an attacker-controlled URL, potentially capturing credentials stored in Jenkins. The vulnerability has a medium severity rating with a CVSS score of 4.2.

Jenkins HCL AppScan Plugin versions 1.8.3 and earlier contain a vulnerability where missing permission checks allow users with Overall/Read permission to enumerate credential IDs stored in Jenkins. This issue does not allow modification or denial of service but exposes credential identifiers, which could aid further attacks. The vulnerability has a medium severity rating with a CVSS score of 4.3.

A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier allows attackers to execute arbitrary code in the context of the Jenkins controller JVM.

Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.

In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2.575 and earlier, LTS 2.568.1 and earlier, the JEP-200 class filter is not applied to classes resolved via a fallback path in the Remoting deserialization implementation, allowing agent processes, code running on agents, and attackers with Agent/Connect permission to bypass the JEP-200 deserialization filter for classes on the Jenkins core classpath.

A missing permission check in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

A cross-site request forgery (CSRF) vulnerability in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL using an attacker-specified username and password.

A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username and password.