CVE-2022-34808: Token stored in plain text by Jenkins Cisco Spark Plugin
Summary
CVE-2022-34808: Token stored in plain text by Jenkins Cisco Spark Plugin. Affects org.jenkins-ci.plugins:cisco-spark versions < 1.1.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Cisco Spark Plugin is a Maven package that provides integration between Jenkins and Cisco Spark. It allows users to receive build notifications and status updates in Cisco Spark rooms. The plugin stores configuration settings in the org.jenkinsci.plugins.spark.SparkNotifier.xml file on the Jenkins controller. This file contains bearer tokens used for authentication with Cisco Spark.
Vulnerability Detail
The Cisco Spark Plugin version 1.1.1 and earlier stores bearer tokens in plain text in its global configuration file. This means that anyone with access to the Jenkins controller file system can view these tokens. As bearer tokens are used for authentication, an attacker with access to the tokens can impersonate the affected user and perform unauthorized actions in Cisco Spark.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround for this vulnerability. However, users can mitigate the risk by regularly monitoring access to the Jenkins controller file system and promptly revoking access for any unauthorized users.
Conclusion
The Cisco Spark Plugin for Jenkins has a vulnerability that allows bearer tokens to be stored in plain text, potentially leading to unauthorized access in Cisco Spark. Users should upgrade to a version that addresses this vulnerability and restrict access to the Jenkins controller file system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:cisco-spark →
FAQ
This vulnerability allows an attacker with access to the bearer tokens to impersonate the affected user and perform unauthorized actions in Cisco Spark.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Simply enter your application's pom.xml file and Vulert will analyze it for any open-source vulnerabilities, including this one.
Yes, the CVSS score for this vulnerability is 3.3.
Manually removing the bearer tokens from the configuration file is not recommended, as it may cause issues with the functionality of the Cisco Spark Plugin. It is best to upgrade to a version that addresses the vulnerability.
There are currently no known exploits for this vulnerability. However, it is important to address the vulnerability promptly to prevent any potential unauthorized access.
