A missing permission check in Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A missing permission check in Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin
    2.0.12 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware
    configurations and credentials IDs of credentials stored in Jenkins. (CVE-2022-36896)

The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.303.x prior to 2.303.30.0.15, or 2.x prior to 2.346.2.3. It is, therefore, affected by multiple vulnerabilities, including the following:

  - A cross-site request forgery (CSRF) vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows     attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause     them to check out an attacker-specified commit. (CVE-2022-36882)

  - Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the application path of     the applications when configuring a deployment, allowing attackers with Item/Configure permission to     upload arbitrary files from the Jenkins controller file system to the selected service. (CVE-2022-36889)

  - A cross-site request forgery (CSRF) vulnerability in Jenkins Coverity Plugin 1.11.4 and earlier allows     attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained     through another method, capturing credentials stored in Jenkins. (CVE-2022-36920)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
411837	SCA: security update for com.compuware.jenkins:compuware-scm-downloader (GHSA-75fc-fv3p-xh82)	Tenable Cloud Security	SCA Checks	Local	medium
411837	SCA: security update for com.compuware.jenkins:compuware-scm-downloader (GHSA-75fc-fv3p-xh82)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
165764	Jenkins Enterprise and Operations Center 2.303.x < 2.303.30.0.15 / 2.346.2.3 Multiple Vulnerabilities (CloudBees Security Advisory 2022-07-27)	Nessus	CGI abuses	Combined	high

Detections

Analytics

CVE-2022-36896

medium

Tenable Plugins

medium

medium

high