medium4.2
CVE-2022-43417
Missing permission checks in Jenkins Katalon Plugin allow capturing credentials
Impact
Katalon Plugin 1.0.32 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Katalon Plugin 1.0.33 properly performs permission checks when accessing the affected HTTP endpoints.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.jenkins-ci.plugins:katalon | < 1.0.33 | 1.0.33 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Katalon | before 1.0.33 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://www.openwall.com/lists/oss-security/2022/10/19/3
- https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2845%20%281%29
- https://github.com/advisories/GHSA-5fvg-h778-jjjx
- https://nvd.nist.gov/vuln/detail/CVE-2022-43417
- https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2845%20(1)