CVE-2022-41246: CSRF vulnerability and mM in org.jenkins-ci.plugins:ws-execution-manager
Summary
CVE-2022-41246: CSRF vulnerability and mM. Affects org.jenkins-ci.plugins:ws-execution-manager versions < 10.0.3.503. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The org.jenkins-ci.plugins:ws-execution-manager package is a Maven ecosystem package that provides the Worksoft Execution Manager Plugin for Jenkins. This plugin allows users to manage and execute Worksoft Certify test cases within Jenkins. It provides features such as form validation and credential management.
Vulnerability Detail
The Worksoft Execution Manager Plugin version 10.0.3.503 and earlier is vulnerable to a cross-site request forgery (CSRF) vulnerability and a method manipulation (mM) vulnerability. The plugin does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method. This can lead to the capture of credentials stored in Jenkins. Additionally, the form validation method does not require POST requests, making it susceptible to CSRF attacks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable or restrict access to the Worksoft Execution Manager Plugin in Jenkins until a fixed version is available. This can be done by disabling the plugin or configuring access controls to limit permissions for the affected plugin.
Conclusion
The Worksoft Execution Manager Plugin in org.jenkins-ci.plugins:ws-execution-manager is vulnerable to a CSRF vulnerability and a method manipulation vulnerability. It is recommended to upgrade to a fixed version of the plugin and review the overall security configuration of the Jenkins instance. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:ws-execution-manager →
FAQ
This vulnerability allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method. This can result in the capture of credentials stored in Jenkins.
No, authentication is not required. The vulnerability can be exploited by attackers with Overall/Read permission.
As a temporary mitigation, users can disable or restrict access to the Worksoft Execution Manager Plugin in Jenkins. It is also recommended to review and update the overall security configuration of the Jenkins instance.
Yes, this vulnerability has been assigned the CVE identifier CVE-2022-41246.
For more information about this vulnerability, you can refer to the GitHub Security Advisory GHSA-p5hr-rf6w-3vvh.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:ws-execution-manager.
