CVE-2021-21681: Password stored in plain text by Jenkins Nomad Plugin
Summary
CVE-2021-21681: Password stored in plain text by Jenkins Nomad Plugin. Affects org.jenkins-ci.plugins:nomad versions < 0.7.5. Fixed in 0.7.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Nomad Plugin is a Maven-based package that provides functionality for managing and orchestrating Docker containers within the Jenkins environment. It allows users to define worker templates and configure authentication credentials for accessing Docker registries. However, versions 0.7.4 and earlier of the Nomad Plugin store these passwords in plain text format in the global config.xml file on the Jenkins controller. This poses a security risk as these passwords can be accessed by users with file system access to the Jenkins controller.
Vulnerability Detail
The vulnerability (CVE-2021-21681) in the Jenkins Nomad Plugin arises from the insecure storage of Docker registry authentication passwords. The passwords are stored unencrypted in the config.xml file, making them easily accessible to unauthorized users. This can lead to potential unauthorized access to Docker registries and the compromise of sensitive data. The vulnerability has a CVSS score of 3.3, indicating a low severity level.
How To Fix
Minimum fixed version
0.7.5
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can manually encrypt the Docker passwords stored in the config.xml file. This can be done by using a suitable encryption algorithm or tool to encrypt the passwords before storing them in the file. However, this workaround is not recommended as it requires manual intervention and may introduce additional complexities.
Conclusion
In conclusion, the Jenkins Nomad Plugin versions 0.7.4 and earlier suffer from a vulnerability that allows unauthorized access to Docker registry authentication passwords. To mitigate this risk, it is recommended to upgrade to version 0.7.5 or later of the plugin. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:nomad →
FAQ
The vulnerability allows unauthorized users with file system access to the Jenkins controller to view the Docker registry authentication passwords. This can lead to potential unauthorized access to Docker registries and the compromise of sensitive data.
Versions 0.7.4 and earlier of the Nomad Plugin are affected by this vulnerability.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your Jenkins instance is affected by this vulnerability. Simply provide your pom.xml file, and Vulert will analyze it for any open-source vulnerabilities, including CVE-2021-21681.
Yes, upgrading to version 0.7.5 or later of the Nomad Plugin fixes this vulnerability by encrypting the Docker passwords stored in the config.xml file.
The CVSS score of this vulnerability is 3.3, indicating a low severity level.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:nomad.
