SSRF vulnerability due to missing permission check in Jenkins JMS Messaging Plugin

2022-05-1301:31:33

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

JSON

A server-side request forgery vulnerability exists in Jenkins JMS Messaging Plugin 1.1.1 and earlier in SSLCertificateAuthenticationMethod.java, UsernameAuthenticationMethod.java that allows attackers with Overall/Read permission to have Jenkins connect to a JMS endpoint.

CPENameOperatorVersion
org.jenkins-ci.plugins:jms-messagingeq1.0.3
org.jenkins-ci.plugins:jms-messagingeq1.0.18
org.jenkins-ci.plugins:jms-messagingeq1.0.21
org.jenkins-ci.plugins:jms-messagingeq1.0.20
org.jenkins-ci.plugins:jms-messagingeq1.0.4
org.jenkins-ci.plugins:jms-messagingeq1.0.8
org.jenkins-ci.plugins:jms-messagingeq1.0.33
org.jenkins-ci.plugins:jms-messagingeq1.0.23
org.jenkins-ci.plugins:jms-messagingeq1.0.5
org.jenkins-ci.plugins:jms-messagingeq1.0.28

Name	Operator	Version
org.jenkins-ci.plugins:jms-messaging	eq	1.0.3
org.jenkins-ci.plugins:jms-messaging	eq	1.0.18
org.jenkins-ci.plugins:jms-messaging	eq	1.0.21
org.jenkins-ci.plugins:jms-messaging	eq	1.0.20
org.jenkins-ci.plugins:jms-messaging	eq	1.0.4
org.jenkins-ci.plugins:jms-messaging	eq	1.0.8
org.jenkins-ci.plugins:jms-messaging	eq	1.0.33
org.jenkins-ci.plugins:jms-messaging	eq	1.0.23
org.jenkins-ci.plugins:jms-messaging	eq	1.0.5
org.jenkins-ci.plugins:jms-messaging	eq	1.0.28