A vulnerability, which was classified as problematic, has been found in Chef Sinatra Plugin on Jenkins (Jenkins Plugin) (version now known). This issue affects the function ChefBuilderConfiguration.DescriptorImpl#doTestConnection. The manipulation with an unknown input leads to a cross-site request forgery vulnerability. Using CWE to declare the problem leads to CWE-352. The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. Impacted is integrity. The summary by CVE is:

A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.

The bug was discovered 04/03/2019. The weakness was presented 04/04/2019 (Website). The advisory is shared at securityfocus.com. The identification of this vulnerability is CVE-2019-1003086 since 04/03/2019. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details are known, but no exploit is available.

The vulnerability was handled as a non-public zero-day exploit for at least 1 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

See VDB-132978, VDB-132979, VDB-132980 and VDB-132981 for similar entries.

Productinfo

Type

• Jenkins Plugin

Name

• Chef Sinatra Plugin

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion