Multijob Plugin up to 1.25 on Jenkins Permission permission

Summaryinfo

A vulnerability marked as critical has been reported in Multijob Plugin up to 1.25 on Jenkins. The affected element is an unknown function of the component Permission. This manipulation causes permission. The identification of this vulnerability is CVE-2017-1000390. It is possible to initiate the attack remotely. There is no exploit available.

Detailsinfo

A vulnerability has been found in Multijob Plugin up to 1.25 on Jenkins (Jenkins Plugin) and classified as critical. Affected by this vulnerability is an unknown code of the component Permission. The manipulation with an unknown input leads to a permission vulnerability. The CWE definition for the vulnerability is CWE-275. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build.

The bug was discovered 10/23/2017. The weakness was shared 01/26/2018 (Website). It is possible to read the advisory at jenkins.io. This vulnerability is known as CVE-2017-1000390 since 11/29/2017. The exploitation appears to be easy. The attack can be launched remotely. A single authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1222 according to MITRE ATT&CK.

The vulnerability was handled as a non-public zero-day exploit for at least 94 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 102824†). The entries VDB-112455, VDB-112456, VDB-112457 and VDB-112458 are related to this item. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Jenkins Plugin

Name

• Multijob Plugin

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion