Cleartext transmission of sensitive information in LDAP Email plugin for Jenkins

1) Cleartext transmission of sensitive information

EUVDB-ID: #VU21525

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2019-10434

CWE-ID: CWE-319 - Cleartext Transmission of Sensitive Information

Exploit availability: No

Description

The vulnerability allows a remote attacker to view a password on the target system.

The vulnerability exists due to the affected software stores an LDAP bind password in its global Jenkins configuration. While the password is stored encrypted on disk, it is transmitted in plain text as part of the configuration form. A remote attacker with ability to intercept network traffic can obtain the password.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

LDAP Email: 0.1 - 0.8

CPE2.3

• cpe:2.3:a:jenkins:ldap_email:0.1:*:*:*:*:jenkins:*:*
• cpe:2.3:a:jenkins:ldap_email:0.2:*:*:*:*:jenkins:*:*
• cpe:2.3:a:jenkins:ldap_email:0.3:*:*:*:*:jenkins:*:*

External links

https://www.openwall.com/lists/oss-security/2019/10/01/2
https://jenkins.io/security/advisory/2019-10-01/#SECURITY-1515

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.