A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in BasicAuthenticationFilter.java, BasicHeaderApiTokenAuthenticator.java that allows attackers to create ephemeral in-memory user records by attempting to log in using invalid credentials.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in
    BasicAuthenticationFilter.java, BasicHeaderApiTokenAuthenticator.java that allows attackers to create
    ephemeral in-memory user records by attempting to log in using invalid credentials. (CVE-2018-1999043)

The version of Jenkins running on the remote web server is prior to 2.146 or is a version of Jenkins LTS prior to 2.138.2. It is, therefore, affected by multiple vulnerabilities:
  - A cross-site scripting (XSS) vulnerability exists due to improper validation of user-supplied input before     returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click a     specially crafted URL, to execute arbitrary script code in a user's browser session (CVE-2018-1000407).

  - A denial of service (DoS) vulnerability exists in the HudsonPrivateSecurityRealm class of Jenkins. An     unauthenticated, remote attacker can exploit this issue, by sending crafted, repeated HTTP requests to particular     URLs, to cause the application to stop responding (CVE-2018-1000408).

  - A directory traversal vulnerability exists in the version of the Stapler Web Framework, which is bundled with     Jenkins. An authenticated, remote attacker can exploit this, by sending a URI that contains directory traversal     characters, to disclose the contents of files located outside of the server's restricted path (CVE-2018-1000997).

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Jenkins running on the remote web server is prior to 2.138 or is a version of Jenkins LTS prior to 2.121.3. It is, therefore, affected by multiple vulnerabilities.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
408720	SCA: security update for org.jenkins-ci.main:jenkins-core (GHSA-2632-h32j-6rg9)	Tenable Cloud Security	SCA Checks	Local	high
408720	SCA: security update for org.jenkins-ci.main:jenkins-core (GHSA-2632-h32j-6rg9)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
118147	Jenkins < 2.138.2 (LTS) / 2.146 Multiple Vulnerabilities	Nessus	CGI abuses	Combined	high
117337	Jenkins < 2.121.3 / 2.138 Multiple Vulnerabilities	Nessus	CGI abuses	Combined	medium

Detections

Analytics

CVE-2018-1999043

high

Tenable Plugins

high

high

high

medium