CVE-2023-37965: CSRF
A missing permission check in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Other sources
Jenkins ElasticBox CI Plugin 5.0.1 and earlier does not perform permission checks in several HTTP endpoints.
This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Additionally, these HTTP endpoints do not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-37965?
CVE-2023-37965 is classified as a high-severity vulnerability due to its potential for credential theft.
How do I fix CVE-2023-37965?
To fix CVE-2023-37965, upgrade the Jenkins ElasticBox CI Plugin to version 5.0.2 or later.
Who is affected by CVE-2023-37965?
CVE-2023-37965 affects users of Jenkins ElasticBox CI Plugin version 5.0.1 and earlier.
What are the consequences of CVE-2023-37965?
The consequences of CVE-2023-37965 include unauthorized access to sensitive credentials stored in Jenkins.
Is there a workaround for CVE-2023-37965?
Disabling Overall/Read permission for untrusted users can serve as a temporary workaround for CVE-2023-37965.