CVE-2020-2090

描述

Amazon EC2 Plugin 1.47 and earlier does not perform permission checks in methods performing form validation. This allows users with Overall/Read access to Jenkins to connect to an attacker-specified URL within the AWS region using attacker-specified credentials IDs obtained through another method. This vulnerability might also allow attackers to capture credentials stored in Jenkins. We have not been able to confirm that this is possible. Additionally, these form validation methods do not require POST requests, resulting in a CSRF vulnerability. Amazon EC2 Plugin 1.48 requires POST requests and Overall/Administer permission for the affected form validation methods.

如何修補 CVE-2020-2090

要修補 CVE-2020-2090,請將受影響套件升級到下列已修補版本。

• —升級至 1.48 或更新版本

CVE-2020-2090 正在被利用嗎?

低 — EPSS 為 0.8%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 1.48

CVSS 分數

參考連結(4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2020-2090
• PATCHgithub.com/jenkinsci/ec2-plugin
• WEBgithub.com/jenkinsci/ec2-plugin/commit/0cdbaf2d7da5c368209f427559c8608dec22a63b
• WEBjenkins.io/security/advisory/2020-01-15/#SECURITY-1004