The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.277.x prior to 2.277.43.0.5, or 2.x prior to 2.319.2.5. It is, therefore, affected by a multiple vulnerabilities, including the following:

  - Jenkins Docker Commons Plugin 1.17 and earlier does not sanitize the name of an image or a tag, resulting     in an OS command execution vulnerability exploitable by attackers with Item/Configure permission or able     to control the contents of a previously configured job's SCM repository. (CVE-2022-20617)

  - A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket Branch Source Plugin     737.vdf9dc06105be and earlier allows attackers to connect to an attacker-specified URL using     attacker-specified credentials IDs obtained through another method, capturing credentials stored in     Jenkins. (CVE-2022-20619)

  - Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to     invoke command-line `git` at an attacker-specified path on the controller, allowing attackers able to     control agent processes to invoke arbitrary OS commands on the controller. (CVE-2022-23118)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Jenkins Enterprise and Operations Center < 2.277.43.0.5 / 2.319.2.5 Multiple Vulnerabilities (CloudBees Security Advisory 2022-01-12)

high Nessus Plugin ID 158059

Version 1.7

Version 1.6

Version 1.7 Jun 4, 2024, 7:00 PM Required Scan configuration ("Enable cgi scanning" set to "True") Plugin Feed: 202406041900
Version 1.6 Sep 28, 2023, 8:23 PM IAVM reference Plugin Feed: 202309282023