high7.1
CVE-2020-2235
CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
Impact
Pipeline Maven Integration Plugin 3.8.2 and earlier does not perform a permission check in a method implementing form validation. This allows users with Overall/Read access to Jenkins to connect to an attacker-specified JDBC URL using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins. Additionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability. Pipeline Maven Integration Plugin 3.8.3 requires POST requests and Job/Configure permission for the affected form validation method.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.jenkins-ci.plugins:pipeline-maven | < 3.8.3 | 3.8.3 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Pipeline Maven Integration | through 3.8.2 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://www.openwall.com/lists/oss-security/2020/08/12/4
- https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1794%20%282%29
- https://github.com/advisories/GHSA-c2hg-2jj6-h8vh
- https://nvd.nist.gov/vuln/detail/CVE-2020-2235
- https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1794%20(2)