CVE-2022-30951: Missing Authorization in Jenkins WMI Windows Agents plugin
Summary
CVE-2022-30951: Missing Authorization in Jenkins WMI Windows Agents plugin. Affects org.jenkins-ci.plugins:windows-slaves versions < 1.8.1. Fixed in 1.8.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins WMI Windows Agents plugin is a component of the Jenkins automation server that allows for the management and control of Windows agents. It includes the Windows Remote Command library, which provides remote command execution capabilities. This library is used by Jenkins to check for the availability of Java and install it if necessary. However, versions 1.8 and earlier of the plugin contain a buffer overflow vulnerability in the Windows Remote Command library. This vulnerability allows users who can connect to a named pipe to execute arbitrary commands on the Windows agent machine. Furthermore, there is no access control in place, potentially allowing unauthorized users to start processes on the machine. The WMI Windows Agents Plugin version 1.8.1 addresses this vulnerability by removing the Windows Remote Command library and expecting a Java runtime to be available on agent machines.
Vulnerability Detail
The vulnerability in the Jenkins WMI Windows Agents plugin (versions 1.8 and earlier) arises from a buffer overflow issue in the Windows Remote Command library. This vulnerability enables users with access to a named pipe to execute commands on the Windows agent machine. Additionally, there is a lack of access control, which means that even users without login privileges can start processes on the machine. This vulnerability poses a moderate risk and has a CVSS score of 4.2.
How To Fix
Minimum fixed version
1.8.1
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. However, users can mitigate the risk by upgrading to version 1.8.1 of the WMI Windows Agents Plugin and implementing proper access controls.
Conclusion
The Jenkins WMI Windows Agents plugin (versions 1.8 and earlier) is vulnerable to a missing authorization issue that allows users to execute arbitrary commands on the Windows agent machine. Upgrading to version 1.8.1 or later and implementing proper access controls is recommended to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:windows-slaves →
FAQ
This vulnerability allows users with access to a named pipe to execute arbitrary commands on the Windows agent machine. It also enables unauthorized users to start processes on the machine.
The CVSS score of this vulnerability is 4.2, indicating a moderate risk.
Versions 1.8 and earlier of the WMI Windows Agents Plugin are affected.
To fix this vulnerability, upgrade to version 1.8.1 or later of the WMI Windows Agents Plugin and ensure proper access controls are in place.
While there is no specific workaround provided, users can mitigate the risk by upgrading to version 1.8.1 and implementing access controls.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:windows-slaves.
