Jenkins Security Advisory: Sandbox Bypass, SSRF, CSRF in Multiple Plugins (CVE-2019-1003024)

Vulnerability Key Information Vulnerability Overview Advisory Name: Jenkins Security Advisory 2019-02-19 Affected Plugins: - Acunetix Plugin - Cloud Foundry Plugin - CloudBees CD Plugin - Digital.ai App Management Publisher Plugin - JMS Messaging Plugin 世 - Mattermost Notification Plugin - Octopus Deploy Plugin - Script Security Plugin Description Sandbox Bypasses in Script Security Plugin (SECURITY-1320 / CVE-2019-1003024) - Severity: High - Affected Plugin: script-security - Description: The sandbox can be bypassed by exploiting Groovy language features. CSRF vulnerability and missing permission checks in Cloud Foundry Plugin allowed capturing credentials - Severity: Medium - Affected Plugin: cloudfoundry - Description: The plugin does not perform permission checks on methods that implement form validation, allowing users to connect to URLs specified by an attacker and capture credentials. SSRF vulnerability due to missing permission check in Mattermost Notification Plugin - Severity: Medium - Affected Plugin: mattermost - Description: The plugin allows users to connect to servers and rooms specified by an attacker and post messages. Four additional similar SSRF and CSRF vulnerabilities - Affected Plugins: octopusdeploy, jms-messaging, electricflow, acunetix - Description: Similar to the Mattermost Notification Plugin, these involve information disclosure and authentication bypass. Acunetix Plugin stored API key in plain text (SECURITY-951) - Severity: Low - Affected Plugin: acunetix - Description: API key is stored in plain text in the global configuration file. Arxan MAM Publisher Plugin stored password in plain text (SECURITY-1070) - Severity: Medium - Affected Plugin: ease-plugin - Description: Username and password are stored in plain text in the configuration file. Severity SECURITY-1320: High SECURITY-1070: Medium SECURITY-937: Medium SECURITY-980: Medium SECURITY-985: Medium SECURITY-817: Medium SECURITY-876: Medium SECURITY-951: Low Affected Versions and Remediation Recommendations Provide specific affected versions of each plugin and corresponding fixed versions. Acknowledgments Acknowledge individuals who discovered and reported the vulnerabilities.

Goal Reached Thanks to every supporter — we hit 100%!

Jenkins Security Advisory: Sandbox Bypass, SSRF, CSRF in Multiple Plugins (CVE-2019-1003024)