CVE-2020-2095: Redgate SQL Change Automation Plugin stored credentials in plain text
Summary
CVE-2020-2095: Redgate SQL Change Automation Plugin stored credentials in plain text. Affects com.redgate.plugins.redgatesqlci:redgate-sql-ci versions < 2.0.5. Fixed in 2.0.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Redgate SQL Change Automation Plugin is a Maven package that provides functionality for managing SQL database changes as part of a CI/CD pipeline. It allows developers to automate the deployment of SQL scripts and manage database versioning. The plugin integrates with Jenkins, a popular automation server, to facilitate the continuous integration and delivery of SQL database changes.
Vulnerability Detail
The Redgate SQL Change Automation Plugin version 2.0.4 and earlier stores a NuGet API key in plain text within the job config.xml files. This insecure storage mechanism makes the API key accessible to users with Extended Read permission or those who have access to the Jenkins controller file system. The vulnerability stems from an incomplete fix of SECURITY-1598. An attacker with access to the API key could potentially misuse it to gain unauthorized access to the NuGet package repository or perform other malicious actions.
How To Fix
Minimum fixed version
2.0.5
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. Upgrading to the latest version of the Redgate SQL Change Automation Plugin is the recommended solution.
Conclusion
The Redgate SQL Change Automation Plugin version 2.0.4 and earlier is vulnerable to storing credentials in plain text, potentially exposing the NuGet API key. Upgrading to version 2.0.5 or later is recommended to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for com.redgate.plugins.redgatesqlci:redgate-sql-ci →
FAQ
This vulnerability exposes the NuGet API key stored in the job config.xml files, potentially allowing unauthorized access to the NuGet package repository or other malicious activities.
Users with Extended Read permission or access to the Jenkins controller file system can exploit this vulnerability by viewing the plain text API key.
There is no known instance of this vulnerability being exploited in the wild.
There are no specific mitigations mentioned for this vulnerability. Upgrading to the latest version of the Redgate SQL Change Automation Plugin is the recommended solution.
Yes, the CVSS score of this vulnerability is 4.3 (Moderate).
Related vulnerabilities
Recent vulnerabilities recorded for com.redgate.plugins.redgatesqlci:redgate-sql-ci.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
