CVE-2022-28156: Path traversal in Jenkins Phoenix AutoTest Plugin
Summary
CVE-2022-28156: Path traversal in Jenkins Phoenix AutoTest Plugin. Affects com.surenpi.jenkins:phoenix-autotest versions < 1.3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Jenkins Pipeline: Phoenix AutoTest Plugin is a Maven package that enables automated testing in Jenkins. It provides functionality for copying files and directories from the Jenkins controller to the agent workspace. This plugin is vulnerable to a path traversal attack, allowing attackers with Item/Configure permission to copy arbitrary files and directories from the Jenkins controller to the agent workspace.
Vulnerability Detail
The vulnerability in Jenkins Phoenix AutoTest Plugin (versions 1.3 and earlier) arises from insufficient input validation. Attackers with Item/Configure permission can exploit this vulnerability to traverse the file system and copy sensitive files or directories to the agent workspace. This can lead to unauthorized access, data leakage, or potential code execution on the agent machine.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can restrict Item/Configure permission to trusted individuals only. This can be achieved by adjusting the access control settings in Jenkins to limit the number of users with this permission. Additionally, it is advisable to monitor the agent workspace for any unauthorized file copies or suspicious activities.
Conclusion
The Jenkins Phoenix AutoTest Plugin (versions 1.3 and earlier) is vulnerable to a path traversal attack, allowing unauthorized copying of files and directories. It is crucial to upgrade to a non-vulnerable version and implement access control measures to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for com.surenpi.jenkins:phoenix-autotest →
FAQ
The vulnerability allows attackers to copy arbitrary files and directories from the Jenkins controller to the agent workspace. This can lead to unauthorized access, data leakage, or potential code execution on the agent machine.
Users of Jenkins Pipeline: Phoenix AutoTest Plugin versions 1.3 and earlier are affected by this vulnerability.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities using just the 'pom.xml' file.
There are currently no known exploits for this vulnerability. However, it is important to apply the recommended fixes and monitor for any suspicious activities.
Yes, the CVSS score for this vulnerability is 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Related vulnerabilities
Recent vulnerabilities recorded for com.surenpi.jenkins:phoenix-autotest.
