CVE-2020-2148: Missing permission checks in Jenkins Mac Plugin
Summary
CVE-2020-2148: Missing permission checks in Mac Plugin. Affects fr.edf.jenkins.plugins:mac versions < 1.2.0. Fixed in 1.2.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Mac Plugin is a Maven package (fr.edf.jenkins.plugins:mac) that provides functionality for connecting to SSH servers on macOS. It allows users to configure SSH connections and credentials within Jenkins. This plugin is used by developers and system administrators to automate tasks and manage workflows in Jenkins.
Vulnerability Detail
The Jenkins Mac Plugin version 1.1.0 and earlier suffer from a missing permission check vulnerability. Attackers with Overall/Read permission can exploit this vulnerability to connect to an attacker-specified SSH server using attacker-specified credentials. This means that an unauthorized user with read access to Jenkins can establish an SSH connection to a server of their choice, potentially leading to unauthorized access, data leakage, or further compromise of the Jenkins environment.
How To Fix
Minimum fixed version
1.2.0
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to upgrade to the fixed version of the Jenkins Mac Plugin as soon as possible.
Conclusion
The missing permission check vulnerability in the Jenkins Mac Plugin allows unauthorized users with read access to Jenkins to establish SSH connections to attacker-specified servers. It is crucial to upgrade to version 1.2.0 or later of the plugin to mitigate this vulnerability. For further assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for fr.edf.jenkins.plugins:mac →
FAQ
This vulnerability allows unauthorized users with read access to Jenkins to establish SSH connections to attacker-specified servers using attacker-specified credentials. This can lead to unauthorized access, data leakage, or further compromise of the Jenkins environment.
Users of Jenkins Mac Plugin versions 1.1.0 and earlier are affected by this vulnerability.
There are no known exploits for this vulnerability at the time of this report.
Yes, this vulnerability has been fixed in version 1.2.0 of the Jenkins Mac Plugin.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your Jenkins installation is affected by this vulnerability. Simply enter your pom.xml file and the playground will analyze it for open-source vulnerabilities, including this one.
Related vulnerabilities
Recent vulnerabilities recorded for fr.edf.jenkins.plugins:mac.
