The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.277.x prior to 2.277.43.0.7, 2.303.x prior to 2.303.30.0.6, or 2.x prior to 2.319.3.4. It is, therefore, affected by multiple vulnerabilities, including the following:

  - Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier uses the same checkout directories for     distinct SCMs when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers with     Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.
    (CVE-2022-25173)

  - Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same checkout     directories for distinct SCMs for Pipeline libraries, allowing attackers with Item/Configure permission to     invoke arbitrary OS commands on the controller through crafted SCM contents. (CVE-2022-25174)

  - A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and     earlier allows attackers with Item/Configure permission to execute arbitrary code on the Jenkins     controller JVM using specially crafted library names if a global Pipeline library is already configured.
    (CVE-2022-25182)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Jenkins Enterprise and Operations Center 2.277.x < 2.277.43.0.7 / 2.303.x < 2.303.30.0.6 / 2.319.3.4 Multiple Vulnerabilities (CloudBees Security Advisory 2022-02-15)

high Nessus Plugin ID 158690

Version 1.4