CVE-2020-2310: Missing permission checks in Jenkins Ansible Plugin allow enumerating credentials IDs
Summary
CVE-2020-2310: Missing permission checks in Jenkins Ansible Plugin allow enumerating credentials IDs. Affects org.jenkins-ci.plugins:ansible versions < 1.1. Fixed in 1.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Jenkins Ansible Plugin is a Maven-based open-source plugin that integrates Ansible with Jenkins, allowing users to execute Ansible playbooks as part of their Jenkins workflows. It provides a convenient way to manage and automate infrastructure deployments. However, versions 1.0 and earlier of the plugin suffer from a vulnerability that allows attackers with Overall/Read permission to enumerate credentials IDs stored in Jenkins. This can be exploited in conjunction with other vulnerabilities to capture sensitive credentials.
Vulnerability Detail
The vulnerability in the Jenkins Ansible Plugin arises from the lack of permission checks in certain form validation methods. As a result, users with Overall/Read permission can enumerate credentials IDs, which can then be used to launch further attacks to capture the credentials. The vulnerability has a CVSS score of 4.3, indicating a moderate severity level. It was first published on May 24, 2022, and last modified on April 11, 2023.
How To Fix
Minimum fixed version
1.1
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended solution is to upgrade to the latest version of the Ansible Plugin.
Conclusion
The Jenkins Ansible Plugin is vulnerable to an enumeration of credentials IDs, which can be exploited by attackers with Overall/Read permission. To mitigate this vulnerability, users should upgrade to Ansible Plugin version 1.1 or later. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:ansible →
FAQ
The vulnerability allows attackers with Overall/Read permission to enumerate credentials IDs stored in Jenkins. This can be used as part of an attack to capture sensitive credentials.
Versions 1.0 and earlier of the Ansible Plugin are affected by this vulnerability.
Attackers need Overall/Read permission in Jenkins to exploit this vulnerability.
Yes, the vulnerability has been fixed in Ansible Plugin version 1.1.
The vulnerability has a CVSS score of 4.3, indicating a moderate severity level.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:ansible.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
