CVE-2018-1000602: Jenkins SAML Plugin Session Fixation vulnerability
Summary
CVE-2018-1000602: Jenkins SAML Plugin Session Fixation vulnerability. Affects org.jenkins-ci.plugins:saml versions < 1.0.7. Fixed in 1.0.7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins SAML Plugin is a Maven package (org.jenkins-ci.plugins:saml) that provides Single Sign-On (SSO) functionality for Jenkins. It allows users to authenticate using Security Assertion Markup Language (SAML) and integrates with identity providers. This plugin is widely used in Jenkins installations to enhance security and streamline user authentication.
Vulnerability Detail
A session fixation vulnerability has been identified in Jenkins SAML Plugin versions 1.0.6 and earlier. The vulnerability resides in the SamlSecurityRealm.java file and can be exploited by unauthorized attackers who have control over the pre-authentication session. By leveraging this vulnerability, attackers can impersonate other users and gain unauthorized access to Jenkins. The SAML Plugin version 1.0.7 addresses this issue by invalidating the previous session during login and creating a new one.
How To Fix
Minimum fixed version
1.0.7
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to upgrade to the fixed version of the Jenkins SAML Plugin to mitigate the risk of session fixation attacks.
Conclusion
The Jenkins SAML Plugin is vulnerable to a session fixation attack, allowing unauthorized access to Jenkins. It is crucial to upgrade to version 1.0.7 or later of the plugin to mitigate this risk. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:saml →
FAQ
The vulnerability allows unauthorized attackers to impersonate other users and gain unauthorized access to Jenkins. This can lead to unauthorized actions, data breaches, and potential disruption of the Jenkins environment.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your Jenkins installation is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, using just the pom.xml file.
Yes, the CVSS score for this vulnerability is 6.5, indicating a moderate severity level.
There are no known public exploits for this vulnerability at the time of this report. However, it is crucial to apply the recommended fix to mitigate the risk.
Unfortunately, there are no known temporary measures or workarounds for this vulnerability. Upgrading to the fixed version is the recommended solution.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:saml.
