Detections
Analytics
Jenkins plugins Multiple Vulnerabilities (2024-10-02)
high Nessus Plugin ID 208097
Language:
Synopsis
An application running on a remote web server host is affected by multiple vulnerabilitiesDescription
According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities:- Jenkins Credentials Plugin 1380.va_435002fa_924 and earlier, except 1371.1373.v4eb_fa_b_7161e9, does not redact encrypted values of credentials using the `SecretBytes` type when accessing item `config.xml` via REST API or CLI. (CVE-2024-47805)
- Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `aud` (Audience) claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administrator access to Jenkins. (CVE-2024-47806)
- Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `iss` (Issuer) claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administrator access to Jenkins. (CVE-2024-47807)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Update Jenkins plugins to the following versions:- Credentials Plugin to version 1381.v2c3a_12074da_b_ or later
- OpenId Connect Authentication Plugin to version 4.355.v3a_fb_fca_b_96d4 or later
See vendor advisory for more details.
See Also
Plugin Details
Severity: High
ID: 208097
File Name: jenkins_security_advisory_2024-10-02_plugins.nasl
Version: 1.3
Type: combined
Agent: windows, macosx, unix
Family: CGI abuses
Published: 10/3/2024
Updated: 11/14/2024
Supported Sensors: Nessus Agent, Nessus
Enable CGI Scanning: true
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N
CVSS Score Source: CVE-2024-47805
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:jenkins:jenkins, cpe:/a:cloudbees:jenkins
Required KB Items: installed_sw/Jenkins
Exploit Ease: No known exploits are available
Patch Publication Date: 10/2/2024
Vulnerability Publication Date: 10/2/2024