Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via 'Trigger builds remotely', resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission or knowledge of the Authentication Token.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4223 advisory.

    Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a     software project or jobs run by cron.

    Security Fix(es):

    * jetty: Double release of resource can lead to information disclosure (CVE-2019-17638)

    * jenkins: User-specified tooltip values leads to stored cross-site scripting (CVE-2020-2229)

    * jenkins: Stored XSS vulnerability in project naming strategy (CVE-2020-2230)

    * jenkins: Stored XSS vulnerability in 'trigger builds remotely' (CVE-2020-2231)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3841 advisory.

    Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a     software project or jobs run by cron.

    Security Fix(es):

    * jetty: double release of resource can lead to information disclosure (CVE-2019-17638)

    * jenkins: user-specified tooltip values leads to stored cross-site scripting (CVE-2020-2229)

    * jenkins: stored XSS vulnerability in project naming strategy (CVE-2020-2230)

    * jenkins: stored XSS vulnerability in 'trigger builds remotely' (CVE-2020-2231)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3808 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing     Kubernetes application platform solution designed for on-premise or private     cloud deployments.

    Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a     software project or jobs run by cron.

    Security Fix(es):

    * jenkins: Stored XSS vulnerability in job build time trend (CVE-2020-2220)

    * jenkins: Stored XSS vulnerability in upstream cause (CVE-2020-2221)

    * jenkins: Stored XSS vulnerability in 'keep forever' badge icons (CVE-2020-2222)

    * jenkins: Stored XSS vulnerability in console links (CVE-2020-2223)

    * kubernetes: Node disk DOS by writing to container /etc/hosts (CVE-2020-8557)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Jenkins running on the remote web server is prior to 2.252 or is a version of Jenkins LTS prior to 2.235.4. It is, therefore, affected by multiple cross-site scripting vulnerabilities due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this to execute arbitrary script code in a user's browser session.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Jenkins Security Advisory : Description(High) SECURITY-1955 / CVE-2020-2229 Stored XSS vulnerability in help icons (High) SECURITY-1957 / CVE-2020-2230 Stored XSS vulnerability in project naming strategy (High) SECURITY-1960 / CVE-2020-2231 Stored XSS vulnerability in 'Trigger builds remotely'

ID	Name	Product	Family	Severity
141814	RHEL 7 : OpenShift Container Platform 3.11.306 jenkins (RHSA-2020:4223)	Nessus	Red Hat Local Security Checks	critical
141125	RHEL 7 : OpenShift Container Platform 4.5.13 jenkins (RHSA-2020:3841)	Nessus	Red Hat Local Security Checks	critical
140749	RHEL 7 / 8 : OpenShift Container Platform 4.3.38 jenkins and openshift (RHSA-2020:3808)	Nessus	Red Hat Local Security Checks	critical
139726	Jenkins < 2.235.4 LTS / 2.252 Multiple Cross-Site Scripting (XSS) Vulnerabilities	Nessus	CGI abuses	medium
139557	FreeBSD : jenkins -- multiple vulnerabilities (eef0d2d9-78c0-441e-8b03-454c5baebe20)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2020-2231

medium

Tenable Plugins

critical

critical

critical

medium

medium