CVE-2023-50770

CWE-522 — Insufficiently Protected Credentials CWE-312 — Cleartext Storage of Sensitive Info5 documents5 sources

Severity

6.7MEDIUM

EPSS

0.0%

top 98.39%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Jenkins Project Jenkins Openid Connect Authentication Plugin Jenkins Openid

Timeline

PublishedDec 13

Description

Jenkins OpenId Connect Authentication Plugin 2.6 and earlier stores a password of a local user account used as an anti-lockout feature in a recoverable format, allowing attackers with access to the Jenkins controller file system to recover the plain text password of that account, likely gaining administrator access to Jenkins.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5jenkins_project/jenkins_openid_connect_authentication_plugin2.6

▶Mavenorg.jenkins-ci.plugins:oic-auth< 4.229.vf736b

▶NVDjenkins/openid2.6

🔴Vulnerability Details

CVEList

CVE-2023-50770: Jenkins OpenId Connect Authentication Plugin 2↗2023-12-13

▶

GHSA

Password stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin↗2023-12-13

▶

OSV

Password stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin↗2023-12-13

▶

📋Vendor Advisories

Jenkins

Jenkins Security Advisory 2023-12-13↗2023-12-13

▶