CVE-2022-30950: Buffer overflow in Jenkins WMI Windows Agents plugin
Summary
CVE-2022-30950: Buffer overflow in Jenkins WMI Windows Agents plugin. Affects org.jenkins-ci.plugins:windows-slaves versions < 1.8.1. Fixed in 1.8.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins WMI Windows Agents plugin is a component of the Jenkins automation server that allows for the management and control of Windows agents. It includes the Windows Remote Command library, which provides remote command execution capabilities. This library is used by Jenkins to check for the availability of Java and install it if necessary. However, versions 1.8 and earlier of the WMI Windows Agents plugin contain a buffer overflow vulnerability in the Windows Remote Command library. This vulnerability allows users who can connect to a named pipe to execute arbitrary commands on the Windows agent machine. Additionally, there is no access control in place, potentially allowing unauthorized users to start processes on the machine. The WMI Windows Agents Plugin 1.8.1 addresses this vulnerability by removing the Windows Remote Command library and expecting a Java runtime to be available on agent machines.
Vulnerability Detail
The buffer overflow vulnerability in the Jenkins WMI Windows Agents plugin allows users with access to a named pipe to execute arbitrary commands on the Windows agent machine. This can lead to unauthorized access and potential compromise of the system. Additionally, the lack of access control means that even users who are not allowed to log in can start processes on the machine. The vulnerability has a CVSS score of 4.2, indicating a moderate severity level.
How To Fix
Minimum fixed version
1.8.1
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The Jenkins WMI Windows Agents plugin versions 1.8 and earlier are vulnerable to a buffer overflow that allows unauthorized users to execute commands on the Windows agent machine. Upgrading to version 1.8.1 or later and implementing proper access controls is recommended to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:windows-slaves →
FAQ
This vulnerability allows users with access to a named pipe to execute arbitrary commands on the Windows agent machine. It can lead to unauthorized access and potential compromise of the system.
Versions 1.8 and earlier of the WMI Windows Agents plugin are affected by this vulnerability. Version 1.8.1 and later address the issue.
Yes, the CVSS score for this vulnerability is 4.2, indicating a moderate severity level.
To fix this vulnerability, it is recommended to upgrade to version 1.8.1 or later of the WMI Windows Agents plugin. It is also important to ensure that proper access controls are in place.
There is no specific workaround mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:windows-slaves.
