FKIE_CVE-2019-10337

Vulnerability from fkie_nvd - Published: 2019-06-11 14:29 - Updated: 2024-11-21 04:18
Severity ?
7.5 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
An XML external entities (XXE) vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to control a the content of the input file for the "XML" macro to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side request forgery, or denial-of-service attacks.
References
jenkinsci-cert@googlegroups.comhttp://www.openwall.com/lists/oss-security/2019/06/11/1Mailing List, Third Party Advisory
jenkinsci-cert@googlegroups.comhttp://www.securityfocus.com/bid/108747
jenkinsci-cert@googlegroups.comhttps://access.redhat.com/errata/RHSA-2019:1636
jenkinsci-cert@googlegroups.comhttps://access.redhat.com/errata/RHSA-2019:1851
jenkinsci-cert@googlegroups.comhttps://jenkins.io/security/advisory/2019-06-11/#SECURITY-1399Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2019/06/11/1Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/108747
af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2019:1636
af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2019:1851
af854a3a-2127-422b-91ae-364da2661108https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1399Vendor Advisory
Impacted products
Vendor Product Version
jenkins token_macro *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:jenkins:token_macro:*:*:*:*:*:jenkins:*:*",
              "matchCriteriaId": "46CF086E-57E0-4D08-AD1E-068DE509AFEF",
              "versionEndIncluding": "2.7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An XML external entities (XXE) vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to control a the content of the input file for the \"XML\" macro to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side request forgery, or denial-of-service attacks."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de entidades externas XML (XXE) en el Plugin Token Macro de Jenkins versi\u00f3n 2.7 y anteriores, permit\u00eda a los atacantes capaces de controlar el contenido del archivo de entrada de la macro \"XML\" para tener Jenkins que resolver las entidades externas, resultando en la extracci\u00f3n de secretos del agente de Jenkins, la falsificaci\u00f3n de peticiones del lado del servidor o ataques de denegaci\u00f3n de servicio."
    }
  ],
  "id": "CVE-2019-10337",
  "lastModified": "2024-11-21T04:18:55.137",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2019-06-11T14:29:01.057",
  "references": [
    {
      "source": "jenkinsci-cert@googlegroups.com",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2019/06/11/1"
    },
    {
      "source": "jenkinsci-cert@googlegroups.com",
      "url": "http://www.securityfocus.com/bid/108747"
    },
    {
      "source": "jenkinsci-cert@googlegroups.com",
      "url": "https://access.redhat.com/errata/RHSA-2019:1636"
    },
    {
      "source": "jenkinsci-cert@googlegroups.com",
      "url": "https://access.redhat.com/errata/RHSA-2019:1851"
    },
    {
      "source": "jenkinsci-cert@googlegroups.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1399"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2019/06/11/1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/108747"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://access.redhat.com/errata/RHSA-2019:1636"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://access.redhat.com/errata/RHSA-2019:1851"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1399"
    }
  ],
  "sourceIdentifier": "jenkinsci-cert@googlegroups.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-611"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.