CVE-2019-10439: Jenkins CRX Content Package Deployer Plugin Missing Authorization Vulnerability
Summary
CVE-2019-10439: A missing permission check in Jenkins CRX Content Package Deployer Plugin prior to version 1.9 in various 'doFillCredentialsIdItems' methods allowed users with Overall/Read access to enumerate credentials ID of credentia... Affects org.jenkins-ci.plugins:crx-content-package-deployer versions < 1.9. Fixed in 1.9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins CRX Content Package Deployer Plugin is a Maven-based plugin that allows users to deploy content packages to Adobe CRX repositories. It provides a convenient way to manage and deploy content in Jenkins. The plugin is widely used in Jenkins environments for content management and deployment tasks.
Vulnerability Detail
A missing permission check in Jenkins CRX Content Package Deployer Plugin prior to version 1.9 allows users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins. This vulnerability can be exploited by an attacker with access to Jenkins to gather sensitive information about the stored credentials, potentially leading to further unauthorized access or privilege escalation. The vulnerability has a CVSS score of 4.3, indicating a moderate severity level.
How To Fix
Minimum fixed version
1.9
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by upgrading the plugin to the latest version.
Conclusion
The Jenkins CRX Content Package Deployer Plugin prior to version 1.9 is vulnerable to a missing authorization issue that allows users with Overall/Read access to enumerate credentials IDs. This can lead to unauthorized access and potential privilege escalation. It is crucial to update the plugin to version 1.9 or later to mitigate this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:crx-content-package-deployer →
FAQ
This vulnerability allows users with Overall/Read access to enumerate credentials IDs, potentially exposing sensitive information and increasing the risk of unauthorized access or privilege escalation.
Users of Jenkins CRX Content Package Deployer Plugin versions prior to 1.9 are affected by this vulnerability.
There are no known public exploits for this vulnerability at the time of this report.
Yes, this vulnerability has been patched in version 1.9 of the Jenkins CRX Content Package Deployer Plugin.
You can use the Vulert Playground at Vulert Scanner to check if your Jenkins installation is affected by this vulnerability. Simply enter your pom.xml file and the playground will analyze it for any open-source vulnerabilities, including this one.
References
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:crx-content-package-deployer.
