REDHAT-BUG-1747297: CSRF
Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed users to obtain CSRF tokens without an associated web session ID, resulting in CSRF tokens that did not expire and could be used to bypass CSRF protection for the anonymous user.
Reference: http://www.openwall.com/lists/oss-security/2019/08/28/4
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1747297?
The severity of REDHAT-BUG-1747297 is considered high due to vulnerabilities in CSRF token management in Jenkins.
How do I fix REDHAT-BUG-1747297?
To fix REDHAT-BUG-1747297, upgrade Jenkins to version 2.192 or later, or LTS version 2.176.3 or later.
What versions are affected by REDHAT-BUG-1747297?
Versions of Jenkins up to and including 2.191 and Jenkins LTS up to and including 2.176.2 are affected by REDHAT-BUG-1747297.
What type of vulnerability is identified in REDHAT-BUG-1747297?
REDHAT-BUG-1747297 identifies a Cross-Site Request Forgery (CSRF) vulnerability due to improper handling of CSRF tokens.
Can anonymous users exploit REDHAT-BUG-1747297?
Yes, anonymous users can exploit REDHAT-BUG-1747297 by using CSRF tokens that do not expire, bypassing CSRF protection.