According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities:

  - Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory     while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire     failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by editing     the workspace path. (CVE-2024-5273)

  - High Team Concert Git Plugin 2.0.4 and earlier does not escape the Rational Team Concert (RTC) server URI     on the build page when showing changes. This results in a stored cross-site scripting (XSS) vulnerability     exploitable by attackers able to configure jobs. Team Concert Git Plugin 2.0.5 escapes the Rational Team     Concert (RTC) server URI on the build page when showing changes. (CVE-2024-28793)

  - High OpenText Application Automation Tools Plugin 24.1.0 and earlier does not configure its XML parsers to     prevent XML external entity (XXE) attacks. This allows attackers able to control the input files for     OpenText Application Automation Tools Plugin build steps and post-build steps to have Jenkins parse a     crafted file that uses external entities for extraction of secrets from the Jenkins controller or server-     side request forgery. OpenText Application Automation Tools Plugin 24.1.1-beta disables external entity     resolution for its XML parsers. The fix is currently available only as a beta release. Beta releases will     not appear in the regular update center but can be found in the experimental update center. For more     information on how to install a beta release, see this documentation. (CVE-2024-4184, CVE-2024-4189,     CVE-2024-4690)

  - Medium OpenText Application Automation Tools Plugin 24.1.0 and earlier does not perform permission checks     in several HTTP endpoints. This allows attackers with Overall/Read permission to enumerate ALM jobs     configurations, ALM Octane configurations and Service Virtualization configurations. OpenText Application     Automation Tools Plugin 24.1.1-beta requires Item/Configure permission to enumerate ALM jobs     configurations, ALM Octane configurations and Service Virtualization configurations. The fix is currently     available only as a beta release. Beta releases will not appear in the regular update center but can be     found in the experimental update center. For more information on how to install a beta release, see this     documentation. (CVE-2024-4211, CVE-2024-4691, CVE-2024-4692)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Jenkins plugins Multiple Vulnerabilities (2024-05-24)

high Nessus Plugin ID 197889

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Oct 22, 2024, 8:01 AM CVSS metrics ("CVSSv3 score" set to 8.0) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H") CVSSv2 score source (changed from "CVE-2024-28793" to "CVE-2024-4690") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Plugin Feed: 202410220801
Version 1.5 Oct 4, 2024, 1:49 AM Plugin metadata Plugin Feed: 202410040149
Version 1.4 Jun 5, 2024, 10:55 AM Required Scan configuration ("Enable cgi scanning" set to "True") Plugin Feed: 202406051055
Version 1.3 May 29, 2024, 10:26 AM CVSS metrics ("CVSSv3 score" set to 4.9) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Plugin Feed: 202405291026
Version 1.2 May 27, 2024, 5:58 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202405271758
Version 1.1 May 24, 2024, 5:36 PM New Plugin Feed: 202405241736