CVE-2020-2278: Arbitrary file write vulnerability in Storable Configs Plugin
Summary
CVE-2020-2278: Arbitrary file write vulnerability in Jenkins Storable Configs Plugin. Affects org.jvnet.hudson.plugins:storable-configs-plugin versions < 1.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Storable Configs Plugin is a plugin for Jenkins, an open-source automation server. It allows users to store and manage configuration files for Jenkins jobs. The plugin is written in Java and is part of the Maven ecosystem. It provides functionality for storing job configuration files in a serialized format using the Storable library. This vulnerability affects versions 1.0 and earlier of the Storable Configs Plugin.
Vulnerability Detail
The vulnerability in the Storable Configs Plugin allows attackers with Job/Configure permission to replace any other '.xml' file on the Jenkins controller with a job config.xml file's content. This means that an attacker can overwrite important files on the Jenkins controller, potentially leading to unauthorized access, data loss, or disruption of Jenkins functionality. The vulnerability has a CVSS score of 6.5, indicating a moderate severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by upgrading the Storable Configs Plugin to a secure version.
Conclusion
The Storable Configs Plugin in Jenkins is vulnerable to an arbitrary file write attack, allowing attackers with Job/Configure permission to overwrite arbitrary files on the Jenkins controller. To mitigate this vulnerability, it is crucial to upgrade to a secure version of the plugin and review user permissions. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jvnet.hudson.plugins:storable-configs-plugin →
FAQ
This vulnerability allows attackers to overwrite arbitrary files on the Jenkins controller, potentially leading to unauthorized access, data loss, or disruption of Jenkins functionality.
Users of Jenkins with the Storable Configs Plugin version 1.0 and earlier are affected by this vulnerability.
There are no known public exploits for this vulnerability at the time of this report.
You can use the Vulert Playground at Vulert Scanner to check if your Jenkins installation is affected by this vulnerability. Simply provide your pom.xml file, and Vulert will analyze it for open-source vulnerabilities in real-time.
For more information about this vulnerability, you can contact info@devnack.com or refer to the GitHub Advisory Database at https://github.com/github/advisory-database.
Related vulnerabilities
Recent vulnerabilities recorded for org.jvnet.hudson.plugins:storable-configs-plugin.
