#VU19268 Authentication bypass using an alternate path or channel in Jenkins and Jenkins LTS


Published: 2019-07-19 | Updated: 2019-07-22

Vulnerability identifier: #VU19268

Vulnerability risk: Low

CVSSv3.1: 3.8 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2019-10354

CWE-ID: CWE-288

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Jenkins
Server applications / Application servers
Jenkins LTS
Server applications / Application servers

Vendor: Jenkins

Description

The vulnerability allows a remote attacker to bypass permission checks.

The vulnerability exists due to the access control bypass in the Stapler web framework. A remote authenticated attacker can access view fragments directly, bypass permission checks and possibly obtain sensitive information.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Jenkins: 1 - 2.185

Jenkins LTS: 1.409.1 - 2.176.1

External links
http://github.com/jenkinsci/jenkins/commit/279d8109eddb7a494428baf25af9756c2e33576b
http://jenkins.io/security/advisory/2019-07-17/#SECURITY-534

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability


Red Hat update for OpenShift Container Platform 4.1 jenkins
Red Hat update for OpenShift Container Platform 3.11 jenkins