CVE-2020-2216: Missing permission checks in Zephyr for JIRA Test Management Plugin
Summary
CVE-2020-2216: Missing permission checks in Zephyr for JIRA Test Management Plugin. Affects org.jenkins-ci.plugins:zephyr-for-jira-test-management versions < 1.5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Zephyr for JIRA Test Management Plugin is a Maven package that provides test management capabilities for Jenkins. It allows users to connect to a JIRA server and manage test cases, test cycles, and test executions. The plugin is widely used in software development and testing workflows.
Vulnerability Detail
The Zephyr for JIRA Test Management Plugin version 1.5 and earlier suffer from a missing permission check vulnerability. Attackers with Overall/Read permission can exploit this vulnerability to connect to an attacker-specified HTTP server using an attacker-specified username and password. This can lead to unauthorized access to sensitive information and potential manipulation of test cases and test cycles.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, administrators can revoke Overall/Read permission from users who do not require it. This can limit the potential impact of the vulnerability by reducing the number of users with the ability to exploit it. However, this workaround may affect legitimate users who rely on Overall/Read permission for their tasks.
Conclusion
The Zephyr for JIRA Test Management Plugin version 1.5 and earlier are vulnerable to a missing permission check issue. This vulnerability allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server using an attacker-specified username and password, potentially leading to unauthorized access and manipulation of test cases and test cycles. It is recommended to upgrade to the latest version of the plugin and ensure proper permission checks are implemented to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:zephyr-for-jira-test-management →
FAQ
This vulnerability allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server using an attacker-specified username and password. This can lead to unauthorized access to sensitive information and potential manipulation of test cases and test cycles.
Versions 1.5 and earlier of the Zephyr for JIRA Test Management Plugin are affected by this vulnerability.
There are no known public exploits for this vulnerability at the time of this report.
Yes, it is recommended to upgrade to the latest version of the Zephyr for JIRA Test Management Plugin to fix this vulnerability.
As a temporary workaround, administrators can revoke Overall/Read permission from users who do not require it. However, this may affect legitimate users who rely on Overall/Read permission for their tasks.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:zephyr-for-jira-test-management.
