Missing permission check in Jenkins SWAMP Plugin allows capturing credentials

2022-02-1600:01:13

Google

osv.dev

0.001 Low

EPSS

Percentile

42.9%

JSON

SWAMP Plugin 1.2.6 and earlier does not perform a permission check in a method implementing form validation.

This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

CPENameOperatorVersion
org.continuousassurance.swamp.jenkins:swampeq1.1.2
org.continuousassurance.swamp.jenkins:swampeq0.7.9
org.continuousassurance.swamp.jenkins:swampeq1.0.0
org.continuousassurance.swamp.jenkins:swampeq1.2.0
org.continuousassurance.swamp.jenkins:swampeq1.0.6
org.continuousassurance.swamp.jenkins:swampeq1.0.3
org.continuousassurance.swamp.jenkins:swampeq1.1.1
org.continuousassurance.swamp.jenkins:swampeq1.1.0
org.continuousassurance.swamp.jenkins:swampeq1.2.2
org.continuousassurance.swamp.jenkins:swampeq1.0.1

Name	Operator	Version
org.continuousassurance.swamp.jenkins:swamp	eq	1.1.2
org.continuousassurance.swamp.jenkins:swamp	eq	0.7.9
org.continuousassurance.swamp.jenkins:swamp	eq	1.0.0
org.continuousassurance.swamp.jenkins:swamp	eq	1.2.0
org.continuousassurance.swamp.jenkins:swamp	eq	1.0.6
org.continuousassurance.swamp.jenkins:swamp	eq	1.0.3
org.continuousassurance.swamp.jenkins:swamp	eq	1.1.1
org.continuousassurance.swamp.jenkins:swamp	eq	1.1.0
org.continuousassurance.swamp.jenkins:swamp	eq	1.2.2
org.continuousassurance.swamp.jenkins:swamp	eq	1.0.1