CVE-2022-27198: CSRF vulnerability in Jenkins CloudBees AWS Credentials Plugin
Summary
CVE-2022-27198: CSRF vulnerability in Jenkins CloudBees AWS Credentials Plugin. Affects org.jenkins-ci.plugins:aws-credentials versions < 189.v3551d5642995. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins CloudBees AWS Credentials Plugin is a plugin for Jenkins, an open-source automation server. This plugin allows users to securely store and manage AWS credentials within Jenkins. It provides a convenient way to connect to AWS services from Jenkins pipelines and jobs. However, versions 189.v3551d5642995 and earlier of the plugin are vulnerable to a cross-site request forgery (CSRF) attack.
Vulnerability Detail
The CSRF vulnerability in the Jenkins CloudBees AWS Credentials Plugin allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token. This means that an attacker can perform actions on behalf of a user with Overall/Read permission without their knowledge or consent. The vulnerability can be exploited by tricking a user with Overall/Read permission into visiting a malicious website or clicking on a specially crafted link.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is currently no known workaround for this vulnerability. It is recommended to apply the fix mentioned above by upgrading to a non-vulnerable version of the Jenkins CloudBees AWS Credentials Plugin.
Conclusion
The CSRF vulnerability in the Jenkins CloudBees AWS Credentials Plugin can allow attackers to connect to AWS services using an attacker-specified token. It is recommended to upgrade to a non-vulnerable version of the plugin to mitigate this risk. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:aws-credentials →
FAQ
A CSRF vulnerability allows an attacker to perform actions on behalf of a user without their knowledge or consent. It occurs when a website or application does not properly validate or authenticate requests, allowing an attacker to trick a user into performing unintended actions.
The CSRF vulnerability in the Jenkins CloudBees AWS Credentials Plugin allows attackers to connect to an AWS service using an attacker-specified token. This can lead to unauthorized access to AWS resources and potential data breaches or other malicious activities.
Users of the Jenkins CloudBees AWS Credentials Plugin versions 189.v3551d5642995 and earlier are affected by this vulnerability. Specifically, users with Overall/Read permission are at risk of having their AWS credentials compromised.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your Jenkins installation is affected by this vulnerability. Simply enter your Jenkins pom.xml file and the Vulert Playground will analyze it for any open-source vulnerabilities, including this CSRF vulnerability.
For more information about this vulnerability, you can refer to the GitHub advisory database (https://github.com/github/advisory-database) or contact the Jenkins community for support and guidance.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:aws-credentials.
