JUnit Plugin up to 1.25 on Jenkins TestObject.java Description cross-site request forgery

Summaryinfo

A vulnerability classified as problematic was found in JUnit Plugin up to 1.25 on Jenkins. Affected is an unknown function of the file TestObject.java. Executing a manipulation of the argument Description can lead to cross-site request forgery. This vulnerability is tracked as CVE-2018-1000411. The attack can be launched remotely. No exploit exists.

Detailsinfo

A vulnerability was found in JUnit Plugin up to 1.25 on Jenkins (Jenkins Plugin). It has been declared as problematic. This vulnerability affects an unknown function of the file TestObject.java. The manipulation of the argument description with an unknown input leads to a cross-site request forgery vulnerability. The CWE definition for the vulnerability is CWE-352. The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. As an impact it is known to affect integrity. CVE summarizes:

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

The bug was discovered 09/25/2018. The weakness was disclosed 01/09/2019 with CloudBees, Inc. (Website). The advisory is available at jenkins.io. This vulnerability was named CVE-2018-1000411 since 01/09/2019. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. Technical details are known, but there is no available exploit.

The vulnerability was handled as a non-public zero-day exploit for at least 106 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 106532†). The entries VDB-128837, VDB-128838, VDB-128839 and VDB-128840 are pretty similar. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Jenkins Plugin

Name

• JUnit Plugin

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion