CVE-2022-41245: CSRF vulnerability in Jenkins Worksoft Execution Manager Plugin allows capturing credentials
Summary
CVE-2022-41245: CSRF vulnerability in Jenkins Worksoft Execution Manager Plugin allows capturing credentials. Affects org.jenkins-ci.plugins:ws-execution-manager versions 10.0.0.7 – 10.0.3.503. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Worksoft Execution Manager Plugin is a Maven-based package that provides functionality for executing Worksoft automation tests within a Jenkins environment. It allows users to connect to external URLs using specified credentials, facilitating the integration of Worksoft automation with Jenkins. However, versions 10.0.3.503 and earlier of the plugin contain a vulnerability that can be exploited by attackers with Overall/Read permission. This vulnerability allows them to connect to a URL of their choice using credentials obtained through another method, potentially capturing sensitive credentials stored in Jenkins. Additionally, the form validation method used by the plugin does not require POST requests, making it susceptible to cross-site request forgery (CSRF) attacks.
Vulnerability Detail
The vulnerability in the Jenkins Worksoft Execution Manager Plugin arises from the lack of a permission check in a form validation method. This oversight enables attackers with Overall/Read permission to connect to a URL of their choosing using credentials IDs obtained through another method. By exploiting this vulnerability, an attacker can capture credentials stored in Jenkins, potentially leading to unauthorized access and misuse of sensitive information. Furthermore, the absence of POST request requirement in the form validation method exposes the plugin to CSRF attacks, allowing malicious actors to trick users into performing unintended actions on their behalf.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can restrict access to the Jenkins instance by implementing network-level controls such as firewalls or IP whitelisting. Additionally, it is advisable to review and limit the permissions granted to users with Overall/Read permission to minimize the potential impact of this vulnerability.
Conclusion
The CSRF vulnerability in the Jenkins Worksoft Execution Manager Plugin exposes users to the risk of credential capture and potential unauthorized access. Upgrading to a patched version of the plugin and implementing network-level controls are recommended to mitigate this vulnerability. For further assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:ws-execution-manager →
FAQ
This vulnerability allows attackers to capture credentials stored in Jenkins, potentially leading to unauthorized access and misuse of sensitive information.
Attackers with Overall/Read permission in Jenkins can exploit this vulnerability.
Yes, upgrading to a version of the Worksoft Execution Manager Plugin later than 10.0.3.503 fixes this vulnerability.
Implementing network-level controls and reviewing user permissions can serve as temporary workarounds to mitigate the risk.
No, this vulnerability is rated as moderate with a CVSS score of 4.2.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:ws-execution-manager.
