Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4223 advisory.

  - jetty: double release of resource can lead to information disclosure (CVE-2019-17638)

  - jenkins: user-specified tooltip values leads to stored cross-site scripting (CVE-2020-2229)

  - jenkins: stored XSS vulnerability in project naming strategy (CVE-2020-2230)

  - jenkins: stored XSS vulnerability in 'trigger builds remotely' (CVE-2020-2231)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3841 advisory.

  - jetty: double release of resource can lead to information disclosure (CVE-2019-17638)

  - jenkins: user-specified tooltip values leads to stored cross-site scripting (CVE-2020-2229)

  - jenkins: stored XSS vulnerability in project naming strategy (CVE-2020-2230)

  - jenkins: stored XSS vulnerability in 'trigger builds remotely' (CVE-2020-2231)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3808 advisory.

  - jetty: double release of resource can lead to information disclosure (CVE-2019-17638)

  - jenkins: Stored XSS vulnerability in job build time trend (CVE-2020-2220)

  - jenkins: Stored XSS vulnerability in upstream cause (CVE-2020-2221)

  - jenkins: Stored XSS vulnerability in 'keep forever' badge icons (CVE-2020-2222)

  - jenkins: Stored XSS vulnerability in console links (CVE-2020-2223)

  - jenkins: user-specified tooltip values leads to stored cross-site scripting (CVE-2020-2229)

  - jenkins: stored XSS vulnerability in project naming strategy (CVE-2020-2230)

  - jenkins: stored XSS vulnerability in 'trigger builds remotely' (CVE-2020-2231)

  - kubernetes: Node disk DOS by writing to container /etc/hosts (CVE-2020-8557)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Jenkins running on the remote web server is prior to 2.252 or is a version of Jenkins LTS prior to 2.235.4. It is, therefore, affected by multiple cross-site scripting vulnerabilities due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this to execute arbitrary script code in a user's browser session.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Jenkins Security Advisory : Description(High) SECURITY-1955 / CVE-2020-2229 Stored XSS vulnerability in help icons (High) SECURITY-1957 / CVE-2020-2230 Stored XSS vulnerability in project naming strategy (High) SECURITY-1960 / CVE-2020-2231 Stored XSS vulnerability in 'Trigger builds remotely'

ID	Name	Product	Family	Severity
141814	RHEL 7 : OpenShift Container Platform 3.11.306 jenkins (RHSA-2020:4223)	Nessus	Red Hat Local Security Checks	critical
141125	RHEL 7 : OpenShift Container Platform 4.5.13 jenkins (RHSA-2020:3841)	Nessus	Red Hat Local Security Checks	critical
140749	RHEL 7 / 8 : OpenShift Container Platform 4.3.38 jenkins and openshift (RHSA-2020:3808)	Nessus	Red Hat Local Security Checks	critical
139726	Jenkins < 2.235.4 LTS / 2.252 Multiple Cross-Site Scripting (XSS) Vulnerabilities	Nessus	CGI abuses	medium
139557	FreeBSD : jenkins -- multiple vulnerabilities (eef0d2d9-78c0-441e-8b03-454c5baebe20)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2020-2230

medium

Tenable Plugins

critical

critical

critical

medium

medium