CVE-2022-34810: Jenkins RQM Plugin allows enumerating credentials IDs due to missing permission check
Summary
CVE-2022-34810: Jenkins RQM Plugin allows enumerating credentials IDs due to missing permission check. Affects net.praqma:rqm-plugin versions < 2.8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins RQM Plugin is a Maven package that provides integration between Jenkins and IBM Rational Quality Manager (RQM). It allows users to synchronize test results and other artifacts between Jenkins and RQM. The plugin is widely used in software development and testing processes to streamline the integration of Jenkins and RQM.
Vulnerability Detail
The Jenkins RQM Plugin version 2.8 and earlier contains a vulnerability that allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. This vulnerability is due to a missing permission check in an HTTP endpoint. Attackers can exploit this vulnerability to gather credentials IDs, which can be used in conjunction with other vulnerabilities to capture the credentials stored in Jenkins. The impact of this vulnerability can be significant as it can lead to unauthorized access to sensitive information and potential compromise of the Jenkins environment.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can restrict access to the affected HTTP endpoint by modifying the Jenkins configuration. This can be done by adjusting the access control settings or by blocking access to the endpoint through network-level controls. However, applying the workaround may limit the functionality of the plugin and should be considered a temporary measure until the plugin is updated to a secure version.
Conclusion
The Jenkins RQM Plugin version 2.8 and earlier contains a vulnerability that allows attackers to enumerate credentials IDs without proper permission checks. This can lead to unauthorized access to sensitive information stored in Jenkins. To mitigate the risk, it is recommended to upgrade to a secure version of the plugin (2.9 or later) and apply the necessary access controls. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for net.praqma:rqm-plugin →
FAQ
This vulnerability allows attackers with Overall/Read permission to enumerate credentials IDs stored in Jenkins. This information can be used in combination with other vulnerabilities to capture the credentials and potentially gain unauthorized access to sensitive information.
Users of Jenkins RQM Plugin versions 2.8 and earlier are affected by this vulnerability. It is recommended for all users of the plugin to upgrade to a secure version to mitigate the risk.
At the time of this advisory, there are no known public exploits specifically targeting this vulnerability. However, it is important to apply the necessary security updates to protect against potential future exploits.
Yes, this vulnerability can be exploited remotely by attackers with Overall/Read permission. They can access the vulnerable HTTP endpoint and enumerate credentials IDs without proper permission checks.
Yes, the CVSS score for this vulnerability is 4.3, indicating a moderate severity level. It is important to address this vulnerability to prevent potential unauthorized access and compromise of sensitive information.
Related vulnerabilities
Recent vulnerabilities recorded for net.praqma:rqm-plugin.
