Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the tooltip content of help icons, resulting in a stored cross-site scripting (XSS) vulnerability.

The remote Red Hat Enterprise Linux CoreOS 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4223 advisory.

  - jetty: double release of resource can lead to information disclosure (CVE-2019-17638)

  - jenkins: user-specified tooltip values leads to stored cross-site scripting (CVE-2020-2229)

  - jenkins: stored XSS vulnerability in project naming strategy (CVE-2020-2230)

  - jenkins: stored XSS vulnerability in 'trigger builds remotely' (CVE-2020-2231)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3808 advisory.

  - jetty: double release of resource can lead to information disclosure (CVE-2019-17638)

  - jenkins: Stored XSS vulnerability in job build time trend (CVE-2020-2220)

  - jenkins: Stored XSS vulnerability in upstream cause (CVE-2020-2221)

  - jenkins: Stored XSS vulnerability in 'keep forever' badge icons (CVE-2020-2222)

  - jenkins: Stored XSS vulnerability in console links (CVE-2020-2223)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3841 advisory.

  - jetty: double release of resource can lead to information disclosure (CVE-2019-17638)

  - jenkins: user-specified tooltip values leads to stored cross-site scripting (CVE-2020-2229)

  - jenkins: stored XSS vulnerability in project naming strategy (CVE-2020-2230)

  - jenkins: stored XSS vulnerability in 'trigger builds remotely' (CVE-2020-2231)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the tooltip content of help icons,
    resulting in a stored cross-site scripting (XSS) vulnerability. (CVE-2020-2229)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the tooltip content of help icons,
    resulting in a stored cross-site scripting (XSS) vulnerability. (CVE-2020-2229)

  - Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy
    description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with
    Overall/Manage permission. (CVE-2020-2230)

  - Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting
    a build via 'Trigger builds remotely', resulting in a stored cross-site scripting (XSS) vulnerability
    exploitable by users with Job/Configure permission or knowledge of the Authentication Token.
    (CVE-2020-2231)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4223 advisory.

    Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a     software project or jobs run by cron.

    Security Fix(es):

    * jetty: Double release of resource can lead to information disclosure (CVE-2019-17638)

    * jenkins: User-specified tooltip values leads to stored cross-site scripting (CVE-2020-2229)

    * jenkins: Stored XSS vulnerability in project naming strategy (CVE-2020-2230)

    * jenkins: Stored XSS vulnerability in 'trigger builds remotely' (CVE-2020-2231)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3841 advisory.

    Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a     software project or jobs run by cron.

    Security Fix(es):

    * jetty: double release of resource can lead to information disclosure (CVE-2019-17638)

    * jenkins: user-specified tooltip values leads to stored cross-site scripting (CVE-2020-2229)

    * jenkins: stored XSS vulnerability in project naming strategy (CVE-2020-2230)

    * jenkins: stored XSS vulnerability in 'trigger builds remotely' (CVE-2020-2231)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3808 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing     Kubernetes application platform solution designed for on-premise or private     cloud deployments.

    Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a     software project or jobs run by cron.

    Security Fix(es):

    * jenkins: Stored XSS vulnerability in job build time trend (CVE-2020-2220)

    * jenkins: Stored XSS vulnerability in upstream cause (CVE-2020-2221)

    * jenkins: Stored XSS vulnerability in 'keep forever' badge icons (CVE-2020-2222)

    * jenkins: Stored XSS vulnerability in console links (CVE-2020-2223)

    * kubernetes: Node disk DOS by writing to container /etc/hosts (CVE-2020-8557)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Jenkins running on the remote web server is prior to 2.252 or is a version of Jenkins LTS prior to 2.235.4. It is, therefore, affected by multiple cross-site scripting vulnerabilities due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this to execute arbitrary script code in a user's browser session.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Jenkins Security Advisory : Description(High) SECURITY-1955 / CVE-2020-2229 Stored XSS vulnerability in help icons (High) SECURITY-1957 / CVE-2020-2230 Stored XSS vulnerability in project naming strategy (High) SECURITY-1960 / CVE-2020-2231 Stored XSS vulnerability in 'Trigger builds remotely'

ID	Name	Product	Family	Severity
312578	RHCOS 3 : OpenShift Container Platform 3.11.306 jenkins (RHSA-2020:4223)	Nessus	Red Hat Local Security Checks	critical
312549	RHCOS 4 : OpenShift Container Platform 4.3.38 jenkins and openshift (RHSA-2020:3808)	Nessus	Red Hat Local Security Checks	critical
312543	RHCOS 4 : OpenShift Container Platform 4.5.13 jenkins (RHSA-2020:3841)	Nessus	Red Hat Local Security Checks	critical
415958	SCA: security update for org.jenkins-ci.main:jenkins-core (GHSA-hvmc-7g2x-r3p9)	Tenable Cloud Security	SCA Checks	medium
415958	SCA: security update for org.jenkins-ci.main:jenkins-core (GHSA-hvmc-7g2x-r3p9)	Tenable Self-Hosted Container Security	SCA Checks	medium
400348	Alpine: multiple jenkins packages: security update to 2.251-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
400348	Alpine: multiple jenkins packages: security update to 2.251-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
141814	RHEL 7 : OpenShift Container Platform 3.11.306 jenkins (RHSA-2020:4223)	Nessus	Red Hat Local Security Checks	critical
141125	RHEL 7 : OpenShift Container Platform 4.5.13 jenkins (RHSA-2020:3841)	Nessus	Red Hat Local Security Checks	critical
140749	RHEL 7 / 8 : OpenShift Container Platform 4.3.38 jenkins and openshift (RHSA-2020:3808)	Nessus	Red Hat Local Security Checks	critical
139726	Jenkins < 2.235.4 LTS / 2.252 Multiple Cross-Site Scripting (XSS) Vulnerabilities	Nessus	CGI abuses	medium
139557	FreeBSD : jenkins -- multiple vulnerabilities (eef0d2d9-78c0-441e-8b03-454c5baebe20)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2020-2229

medium

Tenable Plugins

critical

critical

critical

medium

medium

medium

medium

critical

critical

critical

medium

medium