CVE-2023-37945: Medium severity Jenkins Saml Single Sign On Jenkins vulnerability
A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows attackers with Overall/Read permission to download a string representation of the current security realm.
Other sources
Jenkins SAML Single Sign On(SSO) Plugin 2.3.0 and earlier does not perform a permission check in an HTTP endpoint.
This allows attackers with Overall/Read permission to download a string representation of the current security realm (Java Object#toString()), which potentially includes sensitive information.
SAML Single Sign On(SSO) Plugin 2.3.1 requires Overall/Administer permission to access the affected HTTP endpoint, and only allows downloading a string representation if the current security realm is this plugin’s.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/io.jenkins.plugins:miniorange-saml-spto a version that resolves this vulnerability.Fixed in 2.3.1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-37945?
CVE-2023-37945 is considered to have a medium severity level due to improper permission checks.
How do I fix CVE-2023-37945?
To fix CVE-2023-37945, upgrade the Jenkins SAML Single Sign On Plugin to version 2.3.1 or later.
What systems are affected by CVE-2023-37945?
CVE-2023-37945 affects Jenkins SAML Single Sign On Plugin versions from 2.1.0 to 2.3.0 inclusive.
What type of vulnerabilities does CVE-2023-37945 represent?
CVE-2023-37945 represents a security vulnerability related to improper access control in a plugin.
What can attackers do if CVE-2023-37945 is exploited?
If successfully exploited, attackers can download a string representation of the current security realm with Overall/Read permission.