CVE-2019-10311: High severity red hat ansible tower vulnerability
A missing permission check in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the TowerInstallation.TowerInstallationDescriptor#doTestTowerConnection form validation method allowed attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Other sources
Jenkins Ansible Tower Plugin did not perform permission checks on a method implementing form validation. This allowed users with Overall/Read access to Jenkins to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Additionally, this form validation method did not require POST requests, resulting in a cross-site request forgery vulnerability.
This form validation method now requires POST requests and Overall/Administer permissions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10311?
CVE-2019-10311 is classified as a medium severity vulnerability that allows unauthorized connections to an attacker-specified URL.
How do I fix CVE-2019-10311?
To fix CVE-2019-10311, upgrade the Jenkins Ansible Tower Plugin to version 0.9.2 or later.
Who is affected by CVE-2019-10311?
CVE-2019-10311 affects users of the Jenkins Ansible Tower Plugin version 0.9.1 and earlier.
What type of vulnerability is CVE-2019-10311?
CVE-2019-10311 is a missing permission check vulnerability in the Jenkins Ansible Tower Plugin.
What can an attacker do exploiting CVE-2019-10311?
An attacker exploiting CVE-2019-10311 can connect to an arbitrary URL using provided credentials, potentially leading to unauthorized access.