Lucene search

GitHub Advisory DatabaseGHSA-W4JV-6RG4-PR4M

HistoryJan 13, 2022 - 12:01 a.m.

Cross-Site Request Forgery in Jenkins Bitbucket Branch Source Plugin

2022-01-1300:01:00

CWE-352

GitHub Advisory Database

github.com

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

0.001 Low

EPSS

Percentile

51.1%

JSON

Jenkins Bitbucket Branch Source Plugin prior to 746.v350d2781c184, 725.vd9f8be0fa250, 2.9.11.2, and 2.9.7.2 does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery (CSRF) vulnerability.

This allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Bitbucket Branch Source Plugin 746.v350d2781c184, 725.vd9f8be0fa250, 2.9.11.2, and 2.9.7.2 requires POST requests for the affected HTTP endpoint.

Affected configurations

Vulners

Node

jenkinsbitbucket_branch_sourceRange<2.9.7.2jenkins

jenkinsbitbucket_branch_sourceRange<2.9.11.2jenkins

jenkinsbitbucket_branch_sourceRange720.vbe985dd73d66≥jenkins

jenkinsbitbucket_branch_sourceRange<725.vd9f8be0fa250jenkins

jenkinsbitbucket_branch_sourceRange726.v7e6f53de133c≥jenkins

jenkinsbitbucket_branch_sourceRange<746.v350d2781c184jenkins

CPENameOperatorVersion
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-sourcelt2.9.7.2
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-sourcelt2.9.11.2
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-sourcege720.vbe985dd73d66
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-sourcelt725.vd9f8be0fa250
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-sourcege726.v7e6f53de133c
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-sourcelt746.v350d2781c184

Name	Operator	Version
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source	lt	2.9.7.2
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source	lt	2.9.11.2
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source	ge	720.vbe985dd73d66
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source	lt	725.vd9f8be0fa250
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source	ge	726.v7e6f53de133c
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source	lt	746.v350d2781c184

References

www.openwall.com/lists/oss-security/2022/01/12/6

github.com/advisories/GHSA-w4jv-6rg4-pr4m

github.com/CVEProject/cvelist/blob/2d78eb36f4d084db7fb35f1535d8d84fdcb7d859/2022/20xxx/CVE-2022-20619.json

github.com/jenkinsci/bitbucket-branch-source-plugin/commit/a596f651a4b3bfe31a087c4d392e81c0167ab551

nvd.nist.gov/vuln/detail/CVE-2022-20619

www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2467

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

0.001 Low

EPSS

Percentile

51.1%

JSON

Related for GHSA-W4JV-6RG4-PR4M