The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.346.x prior to 2.346.40.0.7. It is, therefore, affected by multiple vulnerabilities including the following:

  - Sandbox bypass vulnerability in Script Security Plugin (CVE-2023-24422)

  - CSRF vulnerability in Gerrit Trigger Plugin (CVE-2023-24423)

  - Session fixation vulnerability in OpenId Connect Authentication Plugin (CVE-2023-24424)

  - Exposure of system-scoped Kubernetes credentials in Kubernetes Credentials Provider Plugin     (CVE-2023-24425)

  - Session fixation vulnerability in Azure AD Plugin (CVE-2023-24426)

  - Session fixation vulnerability in Bitbucket OAuth Plugin (CVE-2023-24427)

  - CSRF vulnerability in Bitbucket OAuth Plugin (CVE-2023-24428)

  - Agent-to-controller security bypass in Semantic Versioning Plugin (CVE-2023-24429)

  - XXE vulnerability on agents in Semantic Versioning Plugin (CVE-2023-24430)

  - Missing permission checks in Orka by MacStadium Plugin allow enumerating credentials IDs (CVE-2023-24431)

  - CSRF vulnerability and missing permission checks in Orka by MacStadium Plugin allow capturing credentials     (CVE-2023-24432, CVE-2023-24433)

  - CSRF vulnerability and missing permission checks in GitHub Pull Request Builder Plugin (CVE-2023-24434,     CVE-2023-24435)

  - Missing permission check in GitHub Pull Request Builder Plugin allows enumerating credentials IDs     (CVE-2023-24436)

  - CSRF vulnerability and missing permission checks in JIRA Pipeline Steps Plugin (CVE-2023-24437,     CVE-2023-24438)

  - Keys stored in plain text by JIRA Pipeline Steps Plugin (CVE-2023-24439, CVE-2023-24440)

  - XXE vulnerability on agents in MSTest Plugin (CVE-2023-24441)

  - Credentials stored in plain text by GitHub Pull Request Coverage Status Plugin (CVE-2023-24442)

  - XXE vulnerability in TestComplete support Plugin (CVE-2023-24443)

  - Session fixation vulnerability in OpenID Plugin (CVE-2023-24444)

  - Open redirect vulnerability in OpenID Plugin (CVE-2023-24445)

  - CSRF vulnerability in OpenID Plugin (CVE-2023-24446)

  - CSRF vulnerability and missing permission check in RabbitMQ Consumer Plugin (CVE-2023-24447,     CVE-2023-24448)

  - Path traversal vulnerability in PWauth Security Realm Plugin (CVE-2023-24449)

  - Passwords stored in plain text by view-cloner Plugin (CVE-2023-24450)

  - Missing permission checks in Cisco Spark Notifier Plugin allow enumerating credentials IDs     (CVE-2023-24451)

  - CSRF vulnerability and missing permission check in TestQuality Updater Plugin (CVE-2023-24452,     CVE-2023-24453)

  - Password stored in plain text by TestQuality Updater Plugin (CVE-2023-24454)

  - Path traversal vulnerability in visualexpert Plugin (CVE-2023-24455)

  - Session fixation vulnerability in Keycloak Authentication Plugin (CVE-2023-24456)

  - CSRF vulnerability in Keycloak Authentication Plugin (CVE-2023-24457)

  - CSRF vulnerability and missing permission check in BearyChat Plugin (CVE-2023-24458, CVE-2023-24459)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Jenkins Enterprise and Operations Center 2.346.x < 2.346.40.0.7 Multiple Vulnerabilities (CloudBees Security Advisory 2023-01-24)

critical Nessus Plugin ID 170555

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Jun 4, 2024, 7:00 PM Required Scan configuration ("Enable cgi scanning" set to "True") Plugin Feed: 202406041900
Version 1.1 Feb 3, 2023, 4:05 PM CVSS metrics ("CVSSv3 score" changed from "8.8" to "9.8") CVSS metrics ("CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") CVSSv2 score source (changed from "CVE-2023-24456" to "CVE-2023-24458") CVSSv3 score source (set to "CVE-2023-24456") Plugin Feed: 202302031605
Version 1.0 Jan 25, 2023, 6:08 AM New Plugin Feed: 202301250608