https://bugzilla.redhat.com/show_bug.cgi?id=1609609
Bug ID: 1609609 Summary: CVE-2018-1999001 jenkins: Remote unauthenticated users can move config.xml allowing administrator access to anonymous users Product: Security Response Component: vulnerability Keywords: Security Severity: high Priority: high Assignee: security-response-team@redhat.com Reporter: sfowler@redhat.com CC: ahardin@redhat.com, aos-bugs@redhat.com, bleanhar@redhat.com, bparees@redhat.com, ccoleman@redhat.com, dedgar@redhat.com, java-sig-commits@lists.fedoraproject.org, jgoulding@redhat.com, jokerman@redhat.com, mchappel@redhat.com, mizdebsk@redhat.com, msrb@redhat.com
Unauthenticated users could provide maliciously crafted login credentials that cause Jenkins to move the config.xml file from the Jenkins home directory. This configuration file contains basic configuration of Jenkins, including the selected security realm and authorization strategy. If Jenkins is started without this file present, it will revert to the legacy defaults of granting administrator access to anonymous users.
This issue was caused by the fix for SECURITY-499 in the 2017-11-08 security advisory
External Reference:
https://jenkins.io/security/advisory/2018-07-18/#SECURITY-897
https://bugzilla.redhat.com/show_bug.cgi?id=1609609
Sam Fowler sfowler@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1609610
--- Comment #1 from Sam Fowler sfowler@redhat.com --- Created jenkins tracking bugs for this issue:
Affects: fedora-all [bug 1609610]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1609610 [Bug 1609610] CVE-2018-1999001 jenkins: Remote unauthenticated users can move config.xml allowing administrator access to anonymous users [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1609609
Sam Fowler sfowler@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1609611
https://bugzilla.redhat.com/show_bug.cgi?id=1609609
Jason Shepherd jshepherd@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |80718,reported=20180730,sou |80718,reported=20180730,sou |rce=oss-security,cvss3=8.8/ |rce=oss-security,cvss3=8.8/ |CVSS:3.0/AV:N/AC:L/PR:N/UI: |CVSS:3.0/AV:N/AC:L/PR:N/UI: |R/S:U/C:H/I:H/A:H,cwe=CWE-2 |R/S:U/C:H/I:H/A:H,cwe=CWE-2 |0,fedora-all/jenkins=affect |0,fedora-all/jenkins=affect |ed,openshift-enterprise-3/j |ed,openshift-enterprise-3/j |enkins=new |enkins=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1609609
Jason Shepherd jshepherd@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1610634
https://bugzilla.redhat.com/show_bug.cgi?id=1609609
Jason Shepherd jshepherd@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |80718,reported=20180730,sou |80718,reported=20180730,sou |rce=oss-security,cvss3=8.8/ |rce=oss-security,cvss3=8.8/ |CVSS:3.0/AV:N/AC:L/PR:N/UI: |CVSS:3.0/AV:N/AC:L/PR:N/UI: |R/S:U/C:H/I:H/A:H,cwe=CWE-2 |R/S:U/C:H/I:H/A:H,cwe=CWE-2 |0,fedora-all/jenkins=affect |0,fedora-all/jenkins=affect |ed,openshift-enterprise-3/j |ed,openshift-enterprise-3/j |enkins=affected |enkins=notaffected
java-sig-commits@lists.fedoraproject.org