Reversible One-Way Hash in Script Security - CVE-2022-45379

Vulnerability identifier: #VU69368

CSH Severity: Medium

CVSS v4: 8.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-45379

CWE-ID:

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to the affected plugin stores whole-script approvals as the SHA-1 hash of the approved script. A remote user can perform collision attacks on the system.

Script Security
Red Hat OpenShift Container Platform
cri-o (Red Hat package)
jenkins (Red Hat package)
jenkins-2-plugins (Red Hat package)
IBM Cloud Pak for Business Automation
IBM Automation Decision Services

Install updates from vendor's website.

Script Security - update to 1190.v65867a_a_47126
Red Hat OpenShift Container Platform - addressed in versions 4.9.56, 4.10.51
cri-o (Red Hat package) - addressed in versions 1.23.5-5.rhaos4.10.gitd9dec98.el7, 1.23.5-5.rhaos4.10.gitd9dec98.el8
jenkins (Red Hat package) - update to 2.361.1.1675668150-1.el8
jenkins-2-plugins (Red Hat package) - addressed in versions 4.9.1675668922-1.el8, 4.10.1675144701-1.el8
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3.30, 23.0.2.2
IBM Automation Decision Services - update to 23.0.2.0.2

• https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2564

• Reversible One-Way Hash in Jenkins Script Security plugin
• Multiple vulnerabilities in OpenShift Container Platform 4.10
• Multiple vulnerabilities in OpenShift Container Platform 4.9
• Multiple vulnerabilities in OpenShift Container Platform 4.9
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Multiple vulnerabilities in IBM Automation Decision Services