CVE-2023-40347: Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin - Exposure of System-Scoped Credentials
Summary
CVE-2023-40347: Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing the use of System-scoped credentials otherwise reserved for the global confi... Affects org.jenkins-ci.plugins:maven-artifact-choicelistprovider versions < 1.14. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin is a plugin for the Jenkins automation server that integrates with Nexus, a repository manager for storing and managing software artifacts. This plugin allows users to populate a dropdown list with Maven artifact versions from a Nexus repository. It is commonly used in Jenkins pipelines and jobs that involve Maven-based projects.
Vulnerability Detail
The Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin version 1.14 and earlier suffers from a vulnerability that exposes system-scoped credentials. The plugin fails to set the appropriate context for credentials lookup, enabling the use of system-scoped credentials that are typically reserved for global configuration. This flaw allows attackers with Item/Configure permission to access and capture credentials they are not authorized to view. As of the publication of this advisory, there is no available fix for this vulnerability.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there is no known workaround for this vulnerability. It is recommended to closely monitor the official Jenkins and plugin repositories for updates and apply patches as soon as they are released.
Conclusion
The Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin version 1.14 and earlier is vulnerable to the exposure of system-scoped credentials. This can allow attackers with Item/Configure permission to access and capture sensitive credentials. While there is no fix available at the moment, it is essential to stay updated with the latest releases and promptly apply patches once they are released. Regularly reviewing and updating user permissions and access controls in Jenkins can also help mitigate the risk of unauthorized access. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:maven-artifact-choicelistprovider →
FAQ
This vulnerability allows attackers with Item/Configure permission to access and capture system-scoped credentials in Jenkins, potentially leading to unauthorized access to sensitive information or resources.
No, only versions 1.14 and earlier are affected by this vulnerability.
As of the publication of this advisory, there is no fix available for this vulnerability. Users are advised to regularly check for updates and apply them promptly once a fix is released.
No, this vulnerability requires an attacker to have Item/Configure permission in Jenkins, which typically requires local or authenticated access.
There is no evidence of active exploits targeting this vulnerability at the time of this advisory. However, it is crucial to apply patches and updates as soon as they become available to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:maven-artifact-choicelistprovider.
