A stored cross-site scripting vulnerability in Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed attackers with Overall/Administer permission to configure the update site URL to inject arbitrary HTML and JavaScript in update center web pages.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3144 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing     Kubernetes application platform solution designed for on-premise or private     cloud deployments.

    Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a     software project or jobs run by CRON.

    This advisory contains the updated jenkins RPM package for Red Hat OpenShift Container Platform 3.11.

    Security Fix(es):

    * jenkins: CSRF protection tokens for anonymous users did not expire in some circumstances     (CVE-2019-10384)

    * jenkins: stored cross-site scripting in update center web pages (CVE-2019-10383)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Jenkins running on the remote web server is prior to 2.192 or is a version of Jenkins LTS prior to 2.176.3. It is, therefore, affected by multiple vulnerabilities:

  - A stored Cross-site scripting (XSS) vulnerability exists in the Jenkins update center. An authenticated,     remote attacker with Overall/Administer permission can exploit this by configuring the update site URL to     inject arbitrary HTML and JavaScript in update center web pages. (CVE-2019-10383)

  - A Cross-site request forgery (XSRF) vulnerability exists in Jenkins, caused by an incomplete fix for     SECURITY-626. This allowed users to obtain CSRF tokens without an associated web session ID, resulting in     CSRF tokens that did not expire. An unauthenticated, remote attacker can exploit this to bypass CSRF     protections for the anonymous user. (CVE-2019-10384)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2789 advisory.

    Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a     software project or jobs run by cron.

    Security Fix(es):

    * jenkins: CSRF protection tokens for anonymous users did not expire in some circumstances (SECURITY-1491)     (CVE-2019-10384)

    * jenkins: stored cross-site scripting in update center web pages (SECURITY-1453) (CVE-2019-10383)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Jenkins Security Advisory : Description(Medium) SECURITY-1453 / CVE-2019-10383 Stored XSS vulnerability in update center (High) SECURITY-1491 / CVE-2019-10384 CSRF protection tokens for anonymous users did not expire in some circumstances

ID	Name	Product	Family	Severity
130046	RHEL 7 : OpenShift Container Platform 3.11 jenkins (RHSA-2019:3144)	Nessus	Red Hat Local Security Checks	high
129776	Jenkins < 2.176.3 LTS / 2.192 Multiple Vulnerabilities	Nessus	CGI abuses	high
129144	RHEL 7 : OpenShift Container Platform 4.1.16 jenkins (RHSA-2019:2789)	Nessus	Red Hat Local Security Checks	high
128309	FreeBSD : jenkins -- multiple vulnerabilities (7a7891fc-6318-447a-ba45-31d525ec11a0)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2019-10383

medium

Tenable Plugins

high

high

high

high