https://bugzilla.redhat.com/show_bug.cgi?id=1524945
Bug ID: 1524945 Summary: jenkins-plugin-script-security: Arbitrary file read vulnerability in Script Security Plugin (SECURITY-663) Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@redhat.com Reporter: amaris@redhat.com CC: bleanhar@redhat.com, ccoleman@redhat.com, dedgar@redhat.com, dmcphers@redhat.com, java-sig-commits@lists.fedoraproject.org, jgoulding@redhat.com, jkeck@redhat.com, kseifried@redhat.com, mizdebsk@redhat.com, msrb@redhat.com
Users with the ability to configure sandboxed Groovy and Pipeline scripts, including those from SCM, are able to use a type coercion feature in Groovy to create new File objects from strings. This allowed reading arbitrary files on the Jenkins master file system.
Affected versions: Script Security Plugin up to and including 1.36
External References:
https://jenkins.io/security/advisory/2017-12-11/
https://bugzilla.redhat.com/show_bug.cgi?id=1524945
Adam Mariš amaris@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1524946
--- Comment #1 from Adam Mariš amaris@redhat.com --- Created jenkins-script-security-plugin tracking bugs for this issue:
Affects: fedora-all [bug 1524946]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1524946 [Bug 1524946] jenkins-script-security-plugin: jenkins-plugin-script-security: Arbitrary file read vulnerability in Script Security Plugin (SECURITY-663) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1524945
Adam Mariš amaris@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1524947
https://bugzilla.redhat.com/show_bug.cgi?id=1524945
Adam Mariš amaris@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Summary|jenkins-plugin-script-secur |CVE-2017-1000505 |ity: Arbitrary file read |jenkins-plugin-script-secur |vulnerability in Script |ity: Arbitrary file read |Security Plugin |vulnerability in Script |(SECURITY-663) |Security Plugin | |(SECURITY-663) Alias| |CVE-2017-1000505
https://bugzilla.redhat.com/show_bug.cgi?id=1524945
Kurt Seifried kseifried@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |ahardin@redhat.com, | |jokerman@redhat.com, | |mchappel@redhat.com Whiteboard|impact=moderate,public=2017 |impact=moderate,public=2017 |1211,reported=20171211,sour |1211,reported=20171211,sour |ce=internet,cvss3=6.5/CVSS: |ce=internet,cvss3=6.5/CVSS: |3.0/AV:N/AC:L/PR:L/UI:N/S:U |3.0/AV:N/AC:L/PR:L/UI:N/S:U |/C:H/I:N/A:N,cwe=CWE-200,op |/C:H/I:N/A:N,cwe=CWE-200,op |enshift-enterprise-3/jenkin |enshift-enterprise-3/jenkin |s-plugin-script-security=ne |s-plugin-script-security=af |w,fedora-all/jenkins-script |fected,fedora-all/jenkins-s |-security-plugin=affected |cript-security-plugin=affec | |ted
https://bugzilla.redhat.com/show_bug.cgi?id=1524945
Kurt Seifried kseifried@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1565185
https://bugzilla.redhat.com/show_bug.cgi?id=1524945
--- Comment #3 from Kurt Seifried kseifried@redhat.com --- Statement:
This issue affects the versions of jenkins-plugin-script-security as shipped with Red Hat Enterprise OpenShift Enterprise 3. Red Hat Product Security has rated this issue as having a security impact of Moderate. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.
https://bugzilla.redhat.com/show_bug.cgi?id=1524945
--- Comment #4 from Andrej Nemec anemec@redhat.com --- Statement:
This issue affects the versions of jenkins-plugin-script-security as shipped with Red Hat Enterprise OpenShift Enterprise 3. Red Hat Product Security has rated this issue as having security impact of Moderate. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.
java-sig-commits@lists.fedoraproject.org