Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2021-21625

UNKNOWN
Published 2021-03-18T13:35:23
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2021-21625. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

Jenkins CloudBees AWS Credentials Plugin 1.28 and earlier does not perform a permission check in a helper method for HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of AWS credentials stored in Jenkins in some circumstances.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Jenkins project

Jenkins CloudBees AWS Credentials Plugin

Affected Versions:

unspecified

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

✓ GitHub Reviewed MODERATE

Missing permission checks in Jenkins CloudBees AWS Credentials Plugin allows enumerating credentials IDs

GHSA-jwr9-h4jm-c9ch

Advisory Details

CloudBees AWS Credentials Plugin 1.28 and earlier does not perform a permission check in a helper method for HTTP endpoints. This allows attackers with Overall/Read permission to enumerate credentials IDs of AWS credentials stored in Jenkins if any of the following plugins are installed: - [Amazon Elastic Container Service (ECS) / Fargate](https://plugins.jenkins.io/amazon-ecs) - [AWS Parameter Store Build Wrapper](https://plugins.jenkins.io/aws-parameter-store) - [AWS SAM](https://plugins.jenkins.io/aws-sam)\n\nFurther plugins may use this helper method as well without performing a permission check themselves. Credentials IDs obtained this way can be used as part of an attack to capture the credentials using another vulnerability. CloudBees AWS Credentials Plugin 1.28.1 performs permission checks in the helper method for HTTP endpoints.

Affected Packages

Maven org.jenkins-ci.plugins:aws-credentials
ECOSYSTEM: ≥0 <1.28.1

CVSS Scoring

CVSS Score

5.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2021-21625
WEB https://github.com/jenkinsci/aws-credentials-plugin/commit/dd477a071bd633d9118c63dc3f19a2fd0590aecb
PACKAGE https://github.com/jenkinsci/aws-credentials-plugin
WEB https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2032
WEB http://www.openwall.com/lists/oss-security/2021/03/18/5

Advisory provided by GitHub Security Advisory Database. Published: May 24, 2022, Modified: December 14, 2022

References

https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2032
http://www.openwall.com/lists/oss-security/2021/03/18/5
Published: 2021-03-18T13:35:23
Last Modified: 2024-08-03T18:16:23.692Z
Copied to clipboard!