CVE-2020-2272: Missing permission checks in ElasTest Plugin
Summary
CVE-2020-2272: Missing permission checks in Jenkins ElasTest Plugin. Affects org.jenkins-ci.plugins:elastest versions < 1.2.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ElasTest Plugin is a component of Jenkins, an open-source automation server. It allows users to connect to external URLs using specified credentials. The plugin provides functionality for testing and monitoring distributed systems. However, a vulnerability in versions 1.2.1 and earlier of the plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
Vulnerability Detail
The vulnerability arises from a missing permission check in the ElasTest Plugin. This allows attackers with Overall/Read permission to exploit the plugin's functionality and connect to a URL of their choice with their own credentials. The impact of this vulnerability is that an attacker can potentially gain unauthorized access to external systems and perform malicious actions. The vulnerability has a CVSS score of 4.3, indicating a moderate severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by upgrading to a non-affected version of the ElasTest Plugin.
Conclusion
The ElasTest Plugin in Jenkins is vulnerable to a missing permission check, allowing attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials. To mitigate this vulnerability, users should upgrade to version 1.2.2 or later of the plugin. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:elastest →
FAQ
The ElasTest Plugin is a component of Jenkins that enables users to connect to external URLs using specified credentials. It is primarily used for testing and monitoring distributed systems.
The vulnerability allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials. This can lead to unauthorized access to external systems and potential malicious actions.
The vulnerability has a CVSS score of 4.3, indicating a moderate severity level.
No, there is no known workaround for this vulnerability. It is crucial to apply the recommended fix by upgrading to a non-affected version of the ElasTest Plugin.
To fix this vulnerability, it is recommended to upgrade to version 1.2.2 or later of the ElasTest Plugin, which includes the necessary permission checks to prevent unauthorized access.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:elastest.
