1. Home
  2. Security Advisories
  3. Jenkins
  4. JENKINS:SECURITY-3018

[JENKINS:SECURITY-3018] Incorrect permission checks in `qualys-cs`

Severity High
Affected Packages 2
Fixed Packages 2
CVEs 1
Info Packages References Vulnerabilities

qualys-cs 1.6.2.6 and earlier does not correctly perform a permission check in multiple HTTP endpoints.

This allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to do the following:

  • Enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability.
  • Connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

qualys-cs 1.6.2.7 requires global Overall/Administer permission, or Item/Configure permission on a job, to access the affected endpoint.

Package Affected Version
pkg:maven/org.jenkins-ci.plugins/qualys-cs <= 1.6.2.6
pkg:github/jenkinsci/qualys-cs-plugin <= 1.6.2.6
Package Fixed Version
pkg:maven/org.jenkins-ci.plugins/qualys-cs = 1.6.2.7
pkg:github/jenkinsci/qualys-cs-plugin = 1.6.2.7
ID
JENKINS:SECURITY-3018
Severity
high
Published
2023-09-06T00:00:00
(12 months ago)
Modified
2023-09-06T00:00:00
(12 months ago)
Rights
Jenkins Security Team
Source # ID Name URL
Plugin repository qualys-cs repository https://github.com/jenkinsci/qualys-cs-plugin
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:maven/org.jenkins-ci.plugins/qualys-cs org.jenkins-ci.plugins qualys-cs <= 1.6.2.6
Fixed pkg:maven/org.jenkins-ci.plugins/qualys-cs org.jenkins-ci.plugins qualys-cs = 1.6.2.7
Affected pkg:github/jenkinsci/qualys-cs-plugin jenkinsci qualys-cs-plugin <= 1.6.2.6
Fixed pkg:github/jenkinsci/qualys-cs-plugin jenkinsci qualys-cs-plugin = 1.6.2.7
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date