CVE-2019-1003025: High severity cloud foundry vulnerability
\Jenkins Cloud Foundry Plugin did not perform permission checks on a method implementing form validation. This allowed users with Overall/Read access to Jenkins to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Additionally, this form validation method did not require POST requests, resulting in a cross-site request forgery vulnerability.
This form validation method now requires POST requests and Overall/Administer (for global configuration) or Item/Configure permissions (for job configuration).
Other sources
A exposure of sensitive information vulnerability exists in Jenkins Cloud Foundry Plugin 2.3.1 and earlier in AbstractCloudFoundryPushDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1003025?
CVE-2019-1003025 is classified as a medium severity vulnerability.
How do I fix CVE-2019-1003025?
To fix CVE-2019-1003025, upgrade the Jenkins Cloud Foundry Plugin to version 2.3.2 or later.
What are the consequences of CVE-2019-1003025?
CVE-2019-1003025 may allow unauthorized users to connect to arbitrary URLs using attacker-specified credentials.
Which versions of Jenkins Cloud Foundry Plugin are affected by CVE-2019-1003025?
Versions of Jenkins Cloud Foundry Plugin up to and including 2.3.1 are affected by CVE-2019-1003025.
Who can exploit CVE-2019-1003025?
Any user with Overall/Read access to Jenkins can exploit CVE-2019-1003025.