CVE-2017-1000094: Jenkins Docker Commons Plugin allows any user with Overall/Read permission to get list of valid credentials IDs
Summary
CVE-2017-1000094: Docker Commons Plugin provides a list of applicable credential IDs to allow users configuring a job to select the one they'd like to use to authenticate with a Docker Registry. Affects org.jenkins-ci.plugins:docker-commons versions < 1.8. Fixed in 1.8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Docker Commons Plugin is a Maven package that provides functionality for configuring job authentication with a Docker Registry. It includes a feature that allows users to select a valid credential ID from a list. This plugin did not enforce proper permissions, allowing any user with Overall/Read permission to access the list of valid credential IDs. This vulnerability could be exploited to capture credentials using another vulnerability.
Vulnerability Detail
The vulnerability in the Jenkins Docker Commons Plugin allows unauthorized users with Overall/Read permission to obtain a list of valid credential IDs. This information can be used in an attack to capture the credentials. The plugin did not check permissions, allowing any user with Overall/Read permission to access the list. The vulnerability has a CVSS score of 6.5, indicating a moderate severity level.
How To Fix
Minimum fixed version
1.8
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. Updating the Docker Commons Plugin to the latest version is the recommended solution.
Conclusion
The Jenkins Docker Commons Plugin is vulnerable to an issue that allows unauthorized users to obtain a list of valid credential IDs. This can lead to the capture of credentials and potential unauthorized access to Docker Registries. It is recommended to update the plugin to version 1.8 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:docker-commons →
FAQ
This vulnerability allows unauthorized users to obtain a list of valid credential IDs, which can be used to capture credentials and potentially gain unauthorized access to Docker Registries.
Any user with Overall/Read permission can exploit this vulnerability.
Update the Docker Commons Plugin to version 1.8 or later.
There are no specific workarounds for this vulnerability. Updating the plugin is the recommended solution.
The vulnerability has a CVSS score of 6.5, indicating a moderate severity level.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:docker-commons.
