CVE-2018-1999027

描述

An exposure of sensitive information vulnerability exists in Jenkins SaltStack Plugin 3.1.6 and earlier in SaltAPIBuilder.java, SaltAPIStep.java. SaltStack Plugin did not perform permission checks on methods implementing form validation. This allowed users with Overall/Read access to Jenkins to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins, and to cause Jenkins to submit HTTP requests to attacker-specified URLs. Additionally, these form validation methods did not require POST requests, resulting in a CSRF vulnerability. As of version 3.1.7, these form validation methods require POST requests and Overall/Administer permissions.

如何修補 CVE-2018-1999027

要修補 CVE-2018-1999027,請將受影響套件升級到下列已修補版本。

• —升級至 3.1.7 或更新版本

CVE-2018-1999027 正在被利用嗎?

低 — EPSS 為 0.1%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 3.1.7

CVSS 分數

參考連結(4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2018-1999027
• PATCHgithub.com/jenkinsci/saltstack-plugin
• WEBgithub.com/jenkinsci/saltstack-plugin/commit/5306bcc438ff989e4b1999a0208fd6854979999b
• WEBjenkins.io/security/advisory/2018-07-30/#SECURITY-1009