CVE-2019-1003085: Jenkins Zephyr Enterprise Test Management Plugin missing permission check
Summary
CVE-2019-1003085: Jenkins Zephyr Enterprise Test Management Plugin missing permission check. Affects org.jenkins-ci.plugins:zephyr-enterprise-test-management versions < 1.8. Fixed in 1.8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Zephyr Enterprise Test Management Plugin is a plugin for the Jenkins automation server that integrates with Zephyr Enterprise, a test management tool. It allows users to manage and track test cases, test plans, and test executions within Jenkins. The plugin provides a seamless integration between Jenkins and Zephyr Enterprise, enabling teams to efficiently manage their testing processes.
Vulnerability Detail
The Zephyr Enterprise Test Management Plugin in Jenkins is vulnerable to a missing permission check. Specifically, the ZeeDescriptor#doTestConnection form validation method does not properly check permissions, allowing users with Overall/Read permission to initiate a connection to a server specified by an attacker. This vulnerability can be exploited by an attacker to gain unauthorized access to sensitive information or perform malicious actions on the server.
How To Fix
Minimum fixed version
1.8
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by upgrading the plugin to the latest version.
Conclusion
In conclusion, the Jenkins Zephyr Enterprise Test Management Plugin is vulnerable to a missing permission check, which can allow attackers with Overall/Read permission to establish unauthorized connections to attacker-specified servers. To mitigate this vulnerability, it is recommended to upgrade the plugin to version 1.8 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:zephyr-enterprise-test-management →
FAQ
This vulnerability allows attackers with Overall/Read permission to establish a connection to a server of their choice. Depending on the attacker's intentions, this could lead to unauthorized access to sensitive information or the execution of malicious actions on the server.
Users of Jenkins who have the Zephyr Enterprise Test Management Plugin installed and have granted Overall/Read permission to certain users or groups are affected by this vulnerability.
There are no known instances of this vulnerability being exploited in the wild. However, it is important to apply the fix as soon as possible to mitigate the risk of potential attacks.
Yes, the CVSS score for this vulnerability is 6.5, indicating a moderate severity level.
For more information about this vulnerability, you can refer to the GitHub Security Advisory GHSA-4p5r-2m5c-hvcc or the associated CVE-2019-1003085.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:zephyr-enterprise-test-management.
