Jenkins Security Advisory 2023-01-24

{
  "id": "c27cf756cd8ad9317ff0bdb56012a284467820d3936f3429333473b32ed6c6f7",
  "url": "https://www.jenkins.io/security/advisory/2023-01-24/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Jenkins Security Advisory 2023-01-24",
    "summary": "The advisory reports vulnerabilities across Jenkins plugins. It provides fixed versions for eight plugins; numerous other listed plugins had no fix available at publication.",
    "evidence": "This advisory announces vulnerabilities in the following Jenkins deliverables:",
    "products": [
      {
        "name": {
          "value": "Script Security Plugin",
          "evidence": "Script Security Plugin 1229.v4880b_b_e905a_6 intercepts property assignments"
        },
        "prerequisites": [
          {
            "value": "permission to define and run sandboxed scripts, including Pipelines",
            "evidence": "attackers with permission to define and run sandboxed scripts, including Pipelines"
          }
        ],
        "fixed_versions": [
          {
            "value": "1229.v4880b_b_e905a_6",
            "evidence": "Script Security Plugin 1229.v4880b_b_e905a_6 intercepts property assignments"
          }
        ],
        "affected_versions": [
          {
            "value": "1228.vd93135a_2fb_25 and earlier",
            "evidence": "In Script Security Plugin 1228.vd93135a_2fb_25 and earlier"
          }
        ]
      },
      {
        "name": {
          "value": "Gerrit Trigger Plugin",
          "evidence": "Gerrit Trigger Plugin 2.38.1 requires POST requests"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "2.38.1",
            "evidence": "Gerrit Trigger Plugin 2.38.1 requires POST requests"
          }
        ],
        "affected_versions": [
          {
            "value": "2.38.0 and earlier",
            "evidence": "Gerrit Trigger Plugin 2.38.0 and earlier"
          }
        ]
      },
      {
        "name": {
          "value": "OpenId Connect Authentication Plugin",
          "evidence": "OpenId Connect Authentication Plugin 2.5 invalidates the existing session on login."
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "2.5",
            "evidence": "OpenId Connect Authentication Plugin 2.5 invalidates the existing session on login."
          }
        ],
        "affected_versions": [
          {
            "value": "2.4 and earlier",
            "evidence": "OpenId Connect Authentication Plugin 2.4 and earlier"
          }
        ]
      },
      {
        "name": {
          "value": "Kubernetes Credentials Provider Plugin",
          "evidence": "Kubernetes Credentials Provider Plugin 1.209.v862c6e5fb_1ef defines the appropriate context"
        },
        "prerequisites": [
          {
            "value": "Item/Configure permission",
            "evidence": "attackers with Item/Configure permission"
          }
        ],
        "fixed_versions": [
          {
            "value": "1.209.v862c6e5fb_1ef",
            "evidence": "Kubernetes Credentials Provider Plugin 1.209.v862c6e5fb_1ef defines the appropriate context"
          }
        ],
        "affected_versions": [
          {
            "value": "1.208.v128ee9800c04 and earlier",
            "evidence": "Kubernetes Credentials Provider Plugin 1.208.v128ee9800c04 and earlier"
          }
        ]
      },
      {
        "name": {
          "value": "Microsoft Entra ID (previously Azure AD) Plugin",
          "evidence": "Microsoft Entra ID (previously Azure AD) Plugin 306.va_7083923fd50 invalidates the existing session on login."
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "306.va_7083923fd50",
            "evidence": "Microsoft Entra ID (previously Azure AD) Plugin 306.va_7083923fd50 invalidates the existing session on login."
          }
        ],
        "affected_versions": [
          {
            "value": "303.va_91ef20ee49f and earlier",
            "evidence": "Microsoft Entra ID (previously Azure AD) Plugin 303.va_91ef20ee49f and earlier"
          }
        ]
      },
      {
        "name": {
          "value": "Bitbucket OAuth Plugin",
          "evidence": "Bitbucket OAuth Plugin 0.13 implements a state parameter in its OAuth flow."
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0.13",
            "evidence": "Bitbucket OAuth Plugin 0.13 implements a state parameter in its OAuth flow."
          }
        ],
        "affected_versions": [
          {
            "value": "0.12 and earlier",
            "evidence": "Bitbucket OAuth Plugin 0.12 and earlier"
          }
        ]
      },
      {
        "name": {
          "value": "Semantic Versioning Plugin",
          "evidence": "Semantic Versioning Plugin 1.15 disables external entity resolution for its XML parser."
        },
        "prerequisites": [
          {
            "value": "able to control agent processes",
            "evidence": "attackers able to control agent processes"
          }
        ],
        "fixed_versions": [
          {
            "value": "1.15",
            "evidence": "Semantic Versioning Plugin 1.15 disables external entity resolution for its XML parser."
          }
        ],
        "affected_versions": [
          {
            "value": "1.14 and earlier",
            "evidence": "Semantic Versioning Plugin 1.14 and earlier"
          }
        ]
      },
      {
        "name": {
          "value": "Orka by MacStadium Plugin",
          "evidence": "Orka by MacStadium Plugin 1.32 requires POST requests and Overall/Administer permission"
        },
        "prerequisites": [
          {
            "value": "Overall/Read permission",
            "evidence": "attackers with Overall/Read permission"
          }
        ],
        "fixed_versions": [
          {
            "value": "1.32",
            "evidence": "Orka by MacStadium Plugin 1.32 requires POST requests and Overall/Administer permission"
          }
        ],
        "affected_versions": [
          {
            "value": "1.31 and earlier",
            "evidence": "Orka by MacStadium Plugin 1.31 and earlier"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2023-24422",
        "evidence": "SECURITY-3016 / CVE-2023-24422"
      },
      {
        "value": "CVE-2023-24423",
        "evidence": "SECURITY-2137 / CVE-2023-24423"
      },
      {
        "value": "CVE-2023-24424",
        "evidence": "SECURITY-2978 / CVE-2023-24424"
      },
      {
        "value": "CVE-2023-24425",
        "evidence": "SECURITY-3022 / CVE-2023-24425"
      },
      {
        "value": "CVE-2023-24426",
        "evidence": "SECURITY-2980 / CVE-2023-24426"
      },
      {
        "value": "CVE-2023-24427",
        "evidence": "SECURITY-2982 / CVE-2023-24427"
      },
      {
        "value": "CVE-2023-24428",
        "evidence": "SECURITY-2981 / CVE-2023-24428"
      },
      {
        "value": "CVE-2023-24429",
        "evidence": "CVE-2023-24429"
      },
      {
        "value": "CVE-2023-24430",
        "evidence": "CVE-2023-24430"
      },
      {
        "value": "CVE-2023-24431",
        "evidence": "CVE-2023-24431"
      },
      {
        "value": "CVE-2023-24432",
        "evidence": "CVE-2023-24432 (CSRF)"
      },
      {
        "value": "CVE-2023-24433",
        "evidence": "CVE-2023-24433 (missing permission check)"
      },
      {
        "value": "CVE-2023-24436",
        "evidence": "CVE-2023-24436"
      },
      {
        "value": "CVE-2023-24434",
        "evidence": "CVE-2023-24434 (CSRF)"
      },
      {
        "value": "CVE-2023-24435",
        "evidence": "CVE-2023-24435 (missing permission check)"
      },
      {
        "value": "CVE-2023-24437",
        "evidence": "CVE-2023-24437 (CSRF)"
      },
      {
        "value": "CVE-2023-24438",
        "evidence": "CVE-2023-24438 (missing permission check)"
      },
      {
        "value": "CVE-2023-24439",
        "evidence": "CVE-2023-24439 (storage)"
      },
      {
        "value": "CVE-2023-24440",
        "evidence": "CVE-2023-24440 (masking)"
      },
      {
        "value": "CVE-2023-24441",
        "evidence": "CVE-2023-24441"
      },
      {
        "value": "CVE-2023-24442",
        "evidence": "CVE-2023-24442"
      },
      {
        "value": "CVE-2023-24456",
        "evidence": "CVE-2023-24456"
      },
      {
        "value": "CVE-2023-24457",
        "evidence": "CVE-2023-24457"
      },
      {
        "value": "CVE-2023-24443",
        "evidence": "CVE-2023-24443"
      },
      {
        "value": "CVE-2023-24444",
        "evidence": "CVE-2023-24444"
      },
      {
        "value": "CVE-2023-24445",
        "evidence": "CVE-2023-24445"
      },
      {
        "value": "CVE-2023-24446",
        "evidence": "CVE-2023-24446"
      },
      {
        "value": "CVE-2023-24447",
        "evidence": "CVE-2023-24447 (CSRF)"
      },
      {
        "value": "CVE-2023-24448",
        "evidence": "CVE-2023-24448 (missing permission check)"
      },
      {
        "value": "CVE-2023-24449",
        "evidence": "CVE-2023-24449"
      },
      {
        "value": "CVE-2023-24450",
        "evidence": "CVE-2023-24450"
      },
      {
        "value": "CVE-2023-24451",
        "evidence": "CVE-2023-24451"
      },
      {
        "value": "CVE-2023-24458",
        "evidence": "CVE-2023-24458 (CSRF)"
      },
      {
        "value": "CVE-2023-24459",
        "evidence": "CVE-2023-24459 (missing permission check)"
      },
      {
        "value": "CVE-2023-24452",
        "evidence": "CVE-2023-24452 (CSRF)"
      },
      {
        "value": "CVE-2023-24453",
        "evidence": "CVE-2023-24453 (missing permission check)"
      },
      {
        "value": "CVE-2023-24454",
        "evidence": "CVE-2023-24454"
      },
      {
        "value": "CVE-2023-24455",
        "evidence": "CVE-2023-24455"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-jenkins-security-advisories",
  "document_id": 23942,
  "published_at": "2023-01-24T12:00:00+00:00"
}