CVE-2019-16557: Jenkins Redgate SQL Change Automation Plugin has Insufficiently Protected Credentials
Summary
CVE-2019-16557: Jenkins Redgate SQL Change Automation Plugin has Insufficiently Protected Credentials. Affects com.redgate.plugins.redgatesqlci:redgate-sql-ci versions < 2.0.4. Fixed in 2.0.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Redgate SQL Change Automation Plugin is a Maven package that provides functionality for managing SQL change automation in Jenkins. It allows users to automate the deployment and versioning of SQL Server databases. The plugin is widely used in software development and deployment processes.
Vulnerability Detail
The Jenkins Redgate SQL Change Automation Plugin version 2.0.3 and earlier suffers from a vulnerability where credentials are stored unencrypted in job config.xml files on the Jenkins master. This means that users with Extended Read permission or access to the master file system can view these credentials. This vulnerability poses a risk of unauthorized access to sensitive information, such as database credentials, which can lead to data breaches or unauthorized modifications to databases.
How To Fix
Minimum fixed version
2.0.4
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to upgrade to the fixed version of the plugin to address the issue.
Conclusion
The Jenkins Redgate SQL Change Automation Plugin version 2.0.3 and earlier is vulnerable to unauthorized access to stored credentials. To mitigate this risk, users should upgrade to version 2.0.4 or later of the plugin, which encrypts the credentials in the job config.xml files. It is important to promptly address this vulnerability to protect sensitive information and ensure the security of the Jenkins environment. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for com.redgate.plugins.redgatesqlci:redgate-sql-ci →
FAQ
This vulnerability allows users with certain permissions or access to the Jenkins master file system to view unencrypted credentials stored in job config.xml files. This can lead to unauthorized access to sensitive information and potential data breaches or unauthorized modifications to databases.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your Jenkins environment is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, including this one, using just the pom.xml file.
No, there is no known workaround for this vulnerability. It is crucial to upgrade to the fixed version of the Jenkins Redgate SQL Change Automation Plugin.
There are no known exploits for this vulnerability at the moment. However, it is important to address the issue promptly by upgrading to the fixed version of the plugin to mitigate the risk of unauthorized access to sensitive information.
You can find more information about this vulnerability in the GitHub Advisory Database (https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9hpq-528p-48j3/GHSA-9hpq-528p-48j3.json).
References
Related vulnerabilities
Recent vulnerabilities recorded for com.redgate.plugins.redgatesqlci:redgate-sql-ci.
