CVE-2022-25193: Jenkins Snow Commander Plugin Missing Authorization
Summary
CVE-2022-25193: Jenkins Snow Commander Plugin prior to 2.0 vulnerable to Missing Authorization. Affects io.jenkins.plugins:embotics-vcommander versions < 2.0. Fixed in 2.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Snow Commander Plugin is a tool that allows integration between Jenkins and Snow Commander, enabling users to manage and automate tasks related to Snow Commander. It provides functionality for connecting to a webserver using specified credentials and capturing credentials stored in Jenkins. The plugin version 1.10 and earlier are vulnerable to a Missing Authorization issue.
Vulnerability Detail
The Snow Commander Plugin version 1.10 and earlier does not perform permission checks in methods implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Additionally, these form validation methods do not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability. The vulnerability has a CVSS score of 5.4, indicating a moderate severity level.
How To Fix
Minimum fixed version
2.0
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is strongly advised to upgrade to the fixed version of the plugin as soon as possible.
Conclusion
The Jenkins Snow Commander Plugin version 1.10 and earlier is vulnerable to Missing Authorization and CSRF issues. Upgrading to version 2.0 or later is recommended to fix these vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for io.jenkins.plugins:embotics-vcommander →
FAQ
This vulnerability allows attackers with Overall/Read permission to connect to a webserver using specified credentials and capture credentials stored in Jenkins. It also exposes a CSRF vulnerability, which can be exploited to perform unauthorized actions on behalf of authenticated users.
Users of Snow Commander Plugin versions 1.10 and earlier are affected by this vulnerability.
There are no known public exploits for this vulnerability at the time of this report.
Yes, the vulnerability has been fixed in Snow Commander Plugin version 2.0.
You can find more information about this vulnerability in the official GitHub advisory: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-2phq-ghf8-6586/GHSA-2phq-ghf8-6586.json
Related vulnerabilities
Recent vulnerabilities recorded for io.jenkins.plugins:embotics-vcommander.
