A cross-site scripting vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapler/Stapler.java that allows attackers with the ability to control the existence of some URLs in Jenkins to define JavaScript that would be executed in another user's browser when that other user views HTTP 404 error pages while Stapler debug mode is enabled.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A cross-site scripting vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the
    Stapler web framework's org/kohsuke/stapler/Stapler.java that allows attackers with the ability to control
    the existence of some URLs in Jenkins to define JavaScript that would be executed in another user's
    browser when that other user views HTTP 404 error pages while Stapler debug mode is enabled.
    (CVE-2018-1999007)

The version of Jenkins running on the remote web server is prior to 2.133 or is a version of Jenkins LTS prior to 2.121.2. It is, therefore, affected by multiple vulnerabilities.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Jenkins Security Advisory : Description(High) SECURITY-897 / CVE-2018-1999001 Users without Overall/Read permission can have Jenkins reset parts of global configuration on the next restart (High) SECURITY-914 / CVE-2018-1999002 Arbitrary file read vulnerability (Medium) SECURITY-891 / CVE-2018-1999003 Unauthorized users could cancel queued builds (Medium) SECURITY-892 / CVE-2018-1999004 Unauthorized users could initiate and abort agent launches (Medium) SECURITY-944 / CVE-2018-1999005 Stored XSS vulnerability (Medium) SECURITY-925 / CVE-2018-1999006 Unauthorized users are able to determine when a plugin was extracted from its JPI package (Medium) SECURITY-390 / CVE-2018-1999007 XSS vulnerability in Stapler debug mode

ID	Name	Product	Family	Severity
411168	SCA: security update for org.jenkins-ci.main:jenkins-core, org.kohsuke.stapler:stapler-parent (GHSA-6456-xjm5-g3pg)	Tenable Cloud Security	SCA Checks	medium
411168	SCA: security update for org.jenkins-ci.main:jenkins-core, org.kohsuke.stapler:stapler-parent (GHSA-6456-xjm5-g3pg)	Tenable Self-Hosted Container Security	SCA Checks	medium
111603	Jenkins < 2.121.2 / 2.133 Multiple Vulnerabilities	Nessus	CGI abuses	high
111176	FreeBSD : jenkins -- multiple vulnerabilities (20a1881e-8a9e-11e8-bddf-d017c2ca229d)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2018-1999007

medium

Tenable Plugins

medium

medium

high

high