The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.346.x prior to 2.346.40.0.17. It is, therefore, affected by multiple vulnerabilities including the following:
– CSRF vulnerability and missing permission checks in Code Dx Plugin (CVE-2023-2195, CVE-2023-2631)
– Missing permission checks in Code Dx Plugin (CVE-2023-2196)
– API keys stored and displayed in plain text by Code Dx Plugin (CVE-2023-2632, CVE-2023-2633)
– Stored XSS vulnerability in Pipeline: Job Plugin (CVE-2023-32977)
– CSRF vulnerability in LDAP Plugin (CVE-2023-32978)
– Missing permission check in Email Extension Plugin (CVE-2023-32979)
– CSRF vulnerability in Email Extension Plugin (CVE-2023-32980)
– Arbitrary file write vulnerability on agents in Pipeline Utility Steps Plugin (CVE-2023-32981)
– Secrets stored and displayed in plain text by Ansible Plugin (CVE-2023-32982, CVE-2023-32983)
– Stored XSS vulnerability in TestNG Results Plugin (CVE-2023-32984)
– Path traversal vulnerability in Sidebar Link Plugin (CVE-2023-32985)
– Arbitrary file write vulnerability in File Parameter Plugin (CVE-2023-32986)
– CSRF vulnerability in Reverse Proxy Auth Plugin (CVE-2023-32987)
– Missing permission check in Azure VM Agents Plugin allows enumerating credentials IDs (CVE-2023-32988)
– CSRF vulnerability and missing permission checks in Azure VM Agents Plugin (CVE-2023-32989, CVE-2023-32990)
– CSRF vulnerability and missing permission checks in SAML Single Sign On(SSO) Plugin allow XXE (CVE-2023-32991, CVE-2023-32992)
– Missing hostname validation in SAML Single Sign On(SSO) Plugin (CVE-2023-32993)
– SSL/TLS certificate validation unconditionally disabled by SAML Single Sign On(SSO) Plugin (CVE-2023-32994)
– CSRF vulnerability and missing permission check in SAML Single Sign On(SSO) Plugin (CVE-2023-32995, CVE-2023-32996)
– Session fixation vulnerability in CAS Plugin (CVE-2023-32997)
– CSRF vulnerability and missing permission check in AppSpider Plugin (CVE-2023-32998, CVE-2023-32999)
– Credentials displayed without masking by NS-ND Integration Performance Publisher Plugin (CVE-2023-33000)
– Improper masking of credentials in HashiCorp Vault Plugin (CVE-2023-33001)
– Stored XSS vulnerability in TestComplete support Plugin (CVE-2023-33002)
– CSRF vulnerability and missing permission checks in Tag Profiler Plugin (CVE-2023-33003, CVE-2023-33004)
– Session fixation vulnerability in WSO2 Oauth Plugin (CVE-2023-33005)
– CSRF vulnerability in WSO2 Oauth Plugin (CVE-2023-33006)
– Stored XSS vulnerability in LoadComplete support Plugin (CVE-2023-33007)
Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.Read More