Missing permission checks in Jenkins Chaos Monkey Plugin

2022-05-2417:35:09

Google

osv.dev

0.001 Low

EPSS

Percentile

32.8%

JSON

Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint.

This allows attackers with Overall/Read permission to access the Chaos Monkey page and to see the history of actions.

Jenkins Chaos Monkey Plugin 0.4.1 requires Overall/Administer permission to access the Chaos Monkey page and to see the history of actions.

CPENameOperatorVersion
io.jenkins.plugins:chaos-monkeyeq0.2
io.jenkins.plugins:chaos-monkeyeq0.1
io.jenkins.plugins:chaos-monkeyeq0.3
io.jenkins.plugins:chaos-monkeyeq0.4

Name	Operator	Version
io.jenkins.plugins:chaos-monkey	eq	0.2
io.jenkins.plugins:chaos-monkey	eq	0.1
io.jenkins.plugins:chaos-monkey	eq	0.3
io.jenkins.plugins:chaos-monkey	eq	0.4

References

www.openwall.com/lists/oss-security/2020/12/03/2

github.com/jenkinsci/chaos-monkey-plugin

nvd.nist.gov/vuln/detail/CVE-2020-2323

www.jenkins.io/security/advisory/2020-12-03/#SECURITY-2109%20(2)

0.001 Low

EPSS

Percentile

32.8%

JSON

Related for OSV:GHSA-HX53-635R-VMV8