Lucene search

GitHub Advisory DatabaseGHSA-PGPJ-83G3-MFR2

HistoryNov 29, 2023 - 3:30 p.m.

Jenkins Google Compute Engine Plugin has incorrect permission checks

2023-11-2915:30:21

CWE-862

GitHub Advisory Database

github.com

jenkins security vulnerability

google compute engine plugin

permission checks

http endpoints

credentials enumeration

attack vulnerability

global permission

information leakage

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

Percentile

13.3%

JSON

Jenkins Google Compute Engine Plugin 4.550.vb_327fca_3db_11 and earlier does not correctly perform permission checks in multiple HTTP endpoints. This allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to do the following:

Enumerate system-scoped credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability.
Connect to Google Cloud Platform using attacker-specified credentials IDs obtained through another method, to obtain information about existing projects.

Google Compute Engine Plugin 4.551.v5a_4dc98f6962 requires Overall/Administer permission for the affected HTTP endpoints.

Affected configurations

Vulners

Node

org.jenkins-ci.pluginsgoogle-compute-engineRange4.5–4.551.v5a

org.jenkins-ci.pluginsgoogle-compute-engineRange<4.3.17.1

VendorProductVersionCPE
org.jenkins-ci.pluginsgoogle-compute-engine*cpe:2.3:a:org.jenkins-ci.plugins:google-compute-engine:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
org.jenkins-ci.plugins	google-compute-engine	*	cpe:2.3:a:org.jenkins-ci.plugins:google-compute-engine::::::::

References

www.openwall.com/lists/oss-security/2023/11/29/1

github.com/advisories/GHSA-pgpj-83g3-mfr2

nvd.nist.gov/vuln/detail/CVE-2023-49652

www.jenkins.io/security/advisory/2023-11-29/#SECURITY-2835

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

Percentile

13.3%

JSON

Related for GHSA-PGPJ-83G3-MFR2