Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the Inbound TCP Agent Protocol/3, allowing unauthorized attackers with knowledge of agent names to obtain the connection secrets for those agents, which can be used to connect to Jenkins, impersonating those agents.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the
    Inbound TCP Agent Protocol/3, allowing unauthorized attackers with knowledge of agent names to obtain the
    connection secrets for those agents, which can be used to connect to Jenkins, impersonating those agents.
    (CVE-2020-2099)

Jenkins Security Advisory : Description(High) SECURITY-1682 / CVE-2020-2099 Inbound TCP Agent Protocol/3 authentication bypass (Medium) SECURITY-1641 / CVE-2020-2100 Jenkins vulnerable to UDP amplification reflection attack (Medium) SECURITY-1659 / CVE-2020-2101 Non-constant time comparison of inbound TCP agent connection secret (Medium) SECURITY-1660 / CVE-2020-2102 Non-constant time HMAC comparison (Medium) SECURITY-1695 / CVE-2020-2103 Diagnostic page exposed session cookies (Medium) SECURITY-1650 / CVE-2020-2104 Memory usage graphs accessible to anyone with Overall/Read (Low) SECURITY-1704 / CVE-2020-2105 Jenkins REST APIs vulnerable to clickjacking (Medium) SECURITY-1680 / CVE-2020-2106 Stored XSS vulnerability in Code Coverage API Plugin (Medium) SECURITY-1565 / CVE-2020-2107 Fortify Plugin stored credentials in plain text (High) SECURITY-1719 / CVE-2020-2108 XXE vulnerability in WebSphere Deployer Plugin

ID	Name	Product	Family	Severity
418229	SCA: security update for org.jenkins-ci.main:jenkins-core (GHSA-qp4f-2w67-c8hw)	Tenable Cloud Security	SCA Checks	high
418229	SCA: security update for org.jenkins-ci.main:jenkins-core (GHSA-qp4f-2w67-c8hw)	Tenable Self-Hosted Container Security	SCA Checks	high
133329	FreeBSD : jenkins -- multiple vulnerabilities (a250539d-d1d4-4591-afd3-c8bdfac335d8)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2020-2099

high

Tenable Plugins

high

high

high