CVE-2023-4302: Jenkins Fortify Plugin missing permission check
Summary
CVE-2023-4302: Jenkins Fortify Plugin missing permission check. Affects org.jenkins-ci.plugins:fortify versions < 22.2.39. Fixed in 22.2.39. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Fortify Plugin is a Maven ecosystem package that integrates Fortify Static Code Analyzer with Jenkins, enabling users to scan their code for security vulnerabilities. It provides a seamless workflow for analyzing and managing Fortify scan results within the Jenkins environment.
Vulnerability Detail
The Jenkins Fortify Plugin version 22.1.38 and earlier suffers from a missing permission check vulnerability. This vulnerability allows attackers with Overall/Read permission to connect to a specified URL using attacker-specified credentials IDs obtained through another method. By exploiting this vulnerability, attackers can capture credentials stored in Jenkins. Additionally, the affected HTTP endpoints do not require POST requests, making it susceptible to cross-site request forgery (CSRF) attacks. The Fortify Plugin version 22.2.39 addresses this vulnerability by enforcing POST requests and requiring appropriate permissions for the affected HTTP endpoints.
How To Fix
Minimum fixed version
22.2.39
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by upgrading to the latest version of the Jenkins Fortify Plugin.
Conclusion
The Jenkins Fortify Plugin version 22.1.38 and earlier is vulnerable to a missing permission check issue that can lead to unauthorized access and potential data breaches. It is crucial to upgrade to version 22.2.39 or later to mitigate this vulnerability. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:fortify →
FAQ
This vulnerability allows attackers with Overall/Read permission to capture credentials stored in Jenkins, potentially leading to unauthorized access and data breaches.
Yes, this vulnerability can be exploited remotely by attackers with Overall/Read permission.
There are no known instances of this vulnerability being exploited in the wild at the time of this report.
Yes, the CVSS score for this vulnerability is 4.2.
Yes, you can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:fortify.
