CVE-2019-1003011
published 2019-02-06CVE-2019-1003011: An information exposure and denial of service vulnerability exists in Jenkins Token Macro Plugin 2.5 and earlier in…
PriorityP341high8.1CVSS 3.1
AVNACLPRLUINSUCHINAH
EPSS
2.04%
81.0th percentile
An information exposure and denial of service vulnerability exists in Jenkins Token Macro Plugin 2.5 and earlier in src/main/java/org/jenkinsci/plugins/tokenmacro/Parser.java, src/main/java/org/jenkinsci/plugins/tokenmacro/TokenMacro.java, src/main/java/org/jenkinsci/plugins/tokenmacro/impl/AbstractChangesSinceMacro.java, src/main/java/org/jenkinsci/plugins/tokenmacro/impl/ChangesSinceLastBuildMacro.java, src/main/java/org/jenkinsci/plugins/tokenmacro/impl/ProjectUrlMacro.java that allows attackers with the ability to control token macro input (such as SCM changelogs) to define recursive input that results in unexpected macro evaluation.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jenkins | active_directory_plugin | — | — |
| jenkins | blue_ocean_plugin | — | — |
| jenkins | config_file_provider_plugin | — | — |
| jenkins | from_job_import_plugin | — | — |
| jenkins | git_plugin | — | — |
| jenkins | github_authentication_plugin | — | — |
| jenkins | groovy_plugin | — | — |
| jenkins | jenkins_startup_or_after_monitoring_plugin | — | — |
| jenkins | job_import_plugin | — | — |
| jenkins | kanboard_plugin | — | — |
| jenkins | monitoring_plugin | — | — |
| jenkins | openid_connect_authentication_plugin | — | — |
| jenkins | script_security_plugin | — | — |
| jenkins | token_macro | <= 2.5 | — |
| jenkins | token_macro_plugin | — | — |
| jenkins | warnings_next_generation_plugin | — | — |
| jenkins | warnings_plugin | — | — |
| jenkins | xml_parser_used_in_job_import_plugin | — | — |
| jenkins_project | jenkins_token_macro_plugin | — | — |
| redhat | openshift_container_platform | — | — |
CVSS provenance
nvdv3.18.1HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
nvdv2.05.5MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:P
vendor_redhat8.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Jenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS
osv·2022-05-13
CVE-2019-1003011 [MEDIUM] Jenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS
Jenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS
Jenkins Token Macro Plugin recursively applied token expansion.
This could be used by users able to affect input to token expansion (such as change log messages), to inject additional tokens into the input, which would then be expanded, resulting in information disclosure (for example values of environment variables), or denial of service.
Most tokens have been changed to no longer recursively apply token expansion.
GHSA
Jenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS
ghsa·2022-05-13
CVE-2019-1003011 [MEDIUM] CWE-674 Jenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS
Jenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS
Jenkins Token Macro Plugin recursively applied token expansion.
This could be used by users able to affect input to token expansion (such as change log messages), to inject additional tokens into the input, which would then be expanded, resulting in information disclosure (for example values of environment variables), or denial of service.
Most tokens have been changed to no longer recursively apply token expansion.
Jenkins
Jenkins Security Advisory 2019-01-28
vendor_jenkins·2019-01-28·CVSS 8.8
CVE-2019-1003005 [HIGH] Jenkins Security Advisory 2019-01-28
Title: Jenkins Security Advisory 2019-01-28
Jenkins Security Advisory 2019-01-28
Jenkins Security Home
For Administrators
Overview
Terminology
Vulnerabilities and Scoring
Security Advisories
Security Issues
Advisory Schedule
Vulnerabilities in Plugins
How We Fix Security Issues
For Reporters
Reporting Vulnerabilities
Jenkins CNA
For Maintainers
Overview
Vulnerabilities in Plugins
Jenkins Security Team
About
Contributions
This advisory announces vulnerabilities in the following Jenkins deliverables:
Active Directory
Plugin
Blue Ocean
Plugin
Config File Provider
Plugin
Git
Plugin
GitHub Authentication
Plugin
Groovy
Plugin
Job Import
Plugin
Job Import
Plugin
Red Hat
jenkins-plugin-token-macro: Recursive token expansion results in information disclosure and DoS in Token Macro Plugin (SECURITY-1102)
vendor_redhat·2019-01-28·CVSS 8.1
CVE-2019-1003011 [HIGH] CWE-96 jenkins-plugin-token-macro: Recursive token expansion results in information disclosure and DoS in Token Macro Plugin (SECURITY-1102)
jenkins-plugin-token-macro: Recursive token expansion results in information disclosure and DoS in Token Macro Plugin (SECURITY-1102)
An information exposure and denial of service vulnerability exists in Jenkins Token Macro Plugin 2.5 and earlier in src/main/java/org/jenkinsci/plugins/tokenmacro/Parser.java, src/main/java/org/jenkinsci/plugins/tokenmacro/TokenMacro.java, src/main/java/org/jenkinsci/plugins/tokenmacro/impl/AbstractChangesSinceMacro.java, src/main/java/org/jenkinsci/plugins/tokenmacro/impl/ChangesSinceLastBuildMacro.java, src/main/java/org/jenkinsci/plugins/tokenmacro/impl/ProjectUrlMacro.java that allows attackers with the ability to control token macro input (such as SCM changelogs) to define recursive input that results in unexpected macro evaluation.
Package: jenkins-p
No detection rules found.
No public exploits indexed.
https://access.redhat.com/errata/RHBA-2019:0326https://access.redhat.com/errata/RHBA-2019:0327https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1102https://access.redhat.com/errata/RHBA-2019:0326https://access.redhat.com/errata/RHBA-2019:0327https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1102
2019-02-06
Published