CVE-2023-40344: Jenkins Delphix Plugin missing permission check
Summary
CVE-2023-40344: Jenkins Delphix Plugin missing permission check. Affects org.jenkins-ci.plugins:delphix versions < 3.0.3. Fixed in 3.0.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Delphix Plugin is a Maven-based plugin that integrates Jenkins with Delphix, a data virtualization platform. It allows users to automate data operations and manage data environments. The plugin provides functionality for creating, refreshing, and reverting data environments, as well as managing data sources and configurations. However, versions 3.0.2 and earlier of the plugin have a vulnerability that allows attackers with Overall/Read permission to enumerate credentials IDs stored in Jenkins. This can be exploited to capture the credentials using another vulnerability.
Vulnerability Detail
The vulnerability in the Jenkins Delphix Plugin arises from a missing permission check in an HTTP endpoint. Attackers with Overall/Read permission can exploit this vulnerability to enumerate credentials IDs of credentials stored in Jenkins. This information can then be used in an attack to capture the credentials using another vulnerability. The vulnerability has a CVSS score of 4.3, indicating a moderate severity level. It was published on August 16, 2023, and affects versions 3.0.2 and earlier of the Delphix Plugin.
How To Fix
Minimum fixed version
3.0.3
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended solution is to upgrade to the fixed version of the Delphix Plugin.
Conclusion
The Jenkins Delphix Plugin versions 3.0.2 and earlier are vulnerable to a missing permission check, allowing attackers with Overall/Read permission to enumerate credentials IDs stored in Jenkins. To mitigate this vulnerability, users should upgrade to version 3.0.3 or later of the Delphix Plugin. No known exploits for this vulnerability exist at the time of this report. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:delphix →
FAQ
The vulnerability allows attackers with Overall/Read permission to enumerate credentials IDs stored in Jenkins. This information can be used to capture the credentials using another vulnerability, potentially leading to unauthorized access to sensitive data or systems.
Users of Jenkins Delphix Plugin versions 3.0.2 and earlier are affected by this vulnerability.
There are no known exploits for this vulnerability at the time of this report.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your Jenkins installation is affected by this vulnerability. Simply provide your pom.xml file, and Vulert will analyze it for open-source vulnerabilities, including this one.
You can find more information about the Delphix Plugin on the official Jenkins website or the plugin's GitHub repository.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:delphix.
