CVE-2022-25199: CSRF
A missing permission check in Jenkins SCP publisher Plugin 1.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials.
Other sources
SCP publisher Plugin 1.8 and earlier does not perform a permission check in a method implementing form validation.
This allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials.
Additionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-25199?
CVE-2022-25199 is considered a medium severity vulnerability due to the potential for unauthorized SSH connections.
How do I fix CVE-2022-25199?
To fix CVE-2022-25199, upgrade the Jenkins SCP Publisher Plugin to version 1.9 or later.
Who is affected by CVE-2022-25199?
CVE-2022-25199 affects users of Jenkins SCP Publisher Plugin versions 1.8 and earlier.
What type of attacks can exploit CVE-2022-25199?
CVE-2022-25199 can be exploited by attackers to connect to an arbitrary SSH server using credentials of their choosing.
What should I do if I cannot upgrade to fix CVE-2022-25199?
If upgrading is not possible, consider restricting access to users with Overall/Read permissions until a patch is applied for CVE-2022-25199.