CVE-2019-1003011: Infoleak
An information exposure and denial of service vulnerability exists in Jenkins Token Macro Plugin 2.5 and earlier in src/main/java/org/jenkinsci/plugins/tokenmacro/Parser.java, src/main/java/org/jenkinsci/plugins/tokenmacro/TokenMacro.java, src/main/java/org/jenkinsci/plugins/tokenmacro/impl/AbstractChangesSinceMacro.java, src/main/java/org/jenkinsci/plugins/tokenmacro/impl/ChangesSinceLastBuildMacro.java, src/main/java/org/jenkinsci/plugins/tokenmacro/impl/ProjectUrlMacro.java that allows attackers with the ability to control token macro input (such as SCM changelogs) to define recursive input that results in unexpected macro evaluation.
Other sources
Jenkins Token Macro Plugin recursively applied token expansion.
This could be used by users able to affect input to token expansion (such as change log messages), to inject additional tokens into the input, which would then be expanded, resulting in information disclosure (for example values of environment variables), or denial of service.
Most tokens have been changed to no longer recursively apply token expansion.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1003011?
CVE-2019-1003011 is classified as an information exposure and denial of service vulnerability.
How do I fix CVE-2019-1003011?
To fix CVE-2019-1003011, upgrade the Jenkins Token Macro Plugin to version 2.6 or later.
What products are affected by CVE-2019-1003011?
CVE-2019-1003011 affects Jenkins Token Macro Plugin version 2.5 and earlier, as well as Red Hat OpenShift Container Platform version 3.11.
What types of vulnerabilities does CVE-2019-1003011 include?
CVE-2019-1003011 includes both information exposure and denial of service vulnerabilities.
Is there a workaround for CVE-2019-1003011?
There are no known workarounds for CVE-2019-1003011; the best action is to upgrade the affected software.