https://bugzilla.redhat.com/show_bug.cgi?id=1291798
Bug ID: 1291798
Summary: CVE-2015-7539 jenkins: Jenkins plugin manager
vulnerable to MITM attacks (SECURITY-234)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: mprpic(a)redhat.com
CC: abhgupta(a)redhat.com, ccoleman(a)redhat.com,
dmcphers(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jialiu(a)redhat.com, joelsmith(a)redhat.com,
jokerman(a)redhat.com, kseifried(a)redhat.com,
lmeyer(a)redhat.com, mizdebsk(a)redhat.com,
mmccomas(a)redhat.com, msrb(a)redhat.com,
tiwillia(a)redhat.com
While the Jenkins update site data is digitally signed, and the signature
verified by Jenkins, Jenkins did not verify the provided SHA-1 checksums for
the plugin files referenced in the update site data. This enabled MITM attacks
on the plugin manager, resulting in installation of attacker-provided plugins.
This could allow attackers able to manipulate the network path between Jenkins
and the update site to install and run arbitrary code on Jenkins.
External References:
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+20...
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=PfjhCqF8Cb&a=cc_unsubscribe