What is GHSA-pgpj-83g3-mfr2?

GHSA-pgpj-83g3-mfr2 is a security advisory published by GitHub Security Advisories with Medium severity. Jenkins Google Compute Engine Plugin has incorrect permission checks

Which CVE IDs does GHSA-pgpj-83g3-mfr2 cover?

GHSA-pgpj-83g3-mfr2 covers the following CVE IDs: CVE-2023-49652. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pgpj-83g3-mfr2?

GHSA-pgpj-83g3-mfr2 has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-pgpj-83g3-mfr2?

GHSA-pgpj-83g3-mfr2 affects 2 products, including: maven/org.jenkins-ci.plugins:google-compute-engine:\u003c 4.3.17.1; maven/org.jenkins-ci.plugins:google-compute-engine:\u003e= 4.5, \u003c 4.551.v5a.

GHSA-pgpj-83g3-mfr2MediumCVSS 4.3

Jenkins Google Compute Engine Plugin has incorrect permission checks

Vendor

GitHub Security Advisories

Published

November 29, 2023

Last Modified

December 5, 2023

🔗 CVE IDs covered (1)

CVE-2023-49652 →

📋 Description

Jenkins Google Compute Engine Plugin 4.550.vb_327fca_3db_11 and earlier does not correctly perform permission checks in multiple HTTP endpoints. This allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to do the following:

Enumerate system-scoped credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability.
Connect to Google Cloud Platform using attacker-specified credentials IDs obtained through another method, to obtain information about existing projects.

Google Compute Engine Plugin 4.551.v5a_4dc98f6962 requires Overall/Administer permission for the affected HTTP endpoints.

🎯 Affected products2

maven/org.jenkins-ci.plugins:google-compute-engine:< 4.3.17.1
maven/org.jenkins-ci.plugins:google-compute-engine:>= 4.5, < 4.551.v5a

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products2

🔗 References (4)