CVE-2020-2146: Missing SSH Host Key Validation in Mac Plugin
Summary
CVE-2020-2146: Missing SSH host key validation in Mac Plugin. Affects fr.edf.jenkins.plugins:mac versions < 1.2.0. Fixed in 1.2.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Mac Plugin is a Maven package (fr.edf.jenkins.plugins:mac) used for connecting to Mac Cloud hosts launched by the plugin. It provides functionality for building agents on Mac systems. The plugin allows users to establish SSH connections to these agents for various tasks. However, versions 1.1.0 and earlier of the Mac Plugin do not perform SSH host key validation when connecting to Mac Cloud hosts. This oversight can be exploited through a man-in-the-middle attack, enabling interception of these connections and potentially compromising the security of the agents.
Vulnerability Detail
The vulnerability (CVE-2020-2146) in the Mac Plugin arises from the lack of SSH host key validation. This means that an attacker can intercept the SSH connections between the plugin and the Mac Cloud hosts, posing as a man-in-the-middle. By doing so, they can eavesdrop on the communication or even modify the data being transmitted. This vulnerability has a CVSS score of 6.8, indicating a moderate severity level. It is crucial to address this vulnerability promptly to prevent unauthorized access and potential data breaches.
How To Fix
Minimum fixed version
1.2.0
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The Mac Plugin (fr.edf.jenkins.plugins:mac) versions 1.1.0 and earlier suffer from a vulnerability (CVE-2020-2146) that allows for man-in-the-middle attacks due to the lack of SSH host key validation. This can lead to unauthorized access and potential data manipulation. To mitigate this risk, users should upgrade to version 1.2.0 or later of the Mac Plugin, which includes SSH host key validation. For further assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for fr.edf.jenkins.plugins:mac →
FAQ
This vulnerability allows an attacker to intercept SSH connections between the Mac Plugin and Mac Cloud hosts, potentially compromising the security of the agents and enabling unauthorized access or data manipulation.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, using just the pom.xml file for analysis.
No, only versions 1.1.0 and earlier of the Mac Plugin are affected. Version 1.2.0 and later include SSH host key validation, addressing this vulnerability.
The severity level of this vulnerability is moderate, with a CVSS score of 6.8. Promptly addressing this vulnerability is essential to prevent potential security breaches.
No specific workaround is mentioned for this vulnerability. It is recommended to upgrade to the fixed version (1.2.0 or later) of the Mac Plugin to ensure SSH host key validation.
Related vulnerabilities
Recent vulnerabilities recorded for fr.edf.jenkins.plugins:mac.
