CVE-2020-2163

jenkins: improperly processes HTML content of list leads to XSS

Jenkins 2.227 and earlier, LTS 2.204.5 and earlier improperly processes HTML content of list view column headers, resulting in a stored XSS vulnerability exploitable by users able to control column headers.

CVSS 3.1 · 5.4 Medium EPSS 1.2% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2020-2162

jenkins: Content-Security-Policy headers for files uploaded leads to XSS

Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not set Content-Security-Policy headers for files uploaded as file parameters to a build, resulting in a stored XSS vulnerability.

CVSS 3.1 · 5.4 Medium EPSS 1.2% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2020-2161

jenkins: XSS in job configuration pages

Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not properly escape node labels that are shown in the form validation for label expressions on job configuration pages, resulting in a stored XSS vulnerability exploitable by users able to define node labels.

CVSS 3.1 · 5.4 Medium EPSS 1.2% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2020-2160

jenkins: CSRF protection bypass via crafted URLs

Jenkins 2.227 and earlier, LTS 2.204.5 and earlier uses different representations of request URL paths, which allows attackers to craft URLs that allow bypassing CSRF protection of any target URL.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2020-2105

jenkins: REST APIs vulnerable to clickjacking

REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks.

CVSS 3.1 · 5.4 Medium EPSS 1.8% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2020-2104

jenkins: Memory usage graphs accessible to anyone with Overall/Read

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier allowed users with Overall/Read access to view a JVM memory usage chart.

CVSS 3.1 · 4.3 Medium EPSS 1.1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2020-2103

jenkins: Exposed session identifiers on user detail object in the whoAmI diagnostic page

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier exposed session identifiers on a user's detail object in the whoAmI diagnostic page.

CVSS 3.1 · 5.4 Medium EPSS 7.0% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2020-2102

jenkins: Non-constant time HMAC comparison

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier used a non-constant time comparison function when validating an HMAC.

CVSS 3.1 · 5.3 Medium EPSS 1.4% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2020-2101

jenkins: Non-constant time comparison of inbound TCP agent connection secret

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack to obtain this secret.

CVSS 3.1 · 5.3 Medium EPSS 1.4% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2020-2100

jenkins: UDP multicast/broadcast service amplification reflection attack

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848.

CVSS 3.1 · 5.8 Medium EPSS 3.4% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2020-2099

jenkins: Inbound TCP Agent Protocol/3 authentication bypass

Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the Inbound TCP Agent Protocol/3, allowing unauthorized attackers with knowledge of agent names to obtain the connection secrets for those agents, which can be used to connect to Jenkins, impersonating those agents.

CVSS 3.1 · 8.6 High EPSS 1.0% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2019-10406

jenkins: XSS vulnerability in Jenkins URL setting

Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not restrict or filter values set as Jenkins URL in the global configuration, resulting in a stored XSS vulnerability exploitable by attackers with Overall/Administer permission.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2019-10405

jenkins: Diagnostic web page exposed Cookie HTTP header

Jenkins 2.196 and earlier, LTS 2.176.3 and earlier printed the value of the "Cookie" HTTP request header on the /whoAmI/ URL, allowing attackers exploiting another XSS vulnerability to obtain the HTTP session cookie despite it being marked HttpOnly.

CVSS 3.1 · 5.4 Medium EPSS 65.3% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2019-10404

jenkins: Stored XSS vulnerability in queue item tooltip

Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the reason why a queue items is blcoked in tooltips, resulting in a stored XSS vulnerability exploitable by users able to control parts of the reason a queue item is blocked, such as label expressions not matching any idle executors.

CVSS 3.1 · 5.4 Medium EPSS 1.0% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2019-10403

jenkins: Stored XSS vulnerability in SCM tag action tooltip

Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the SCM tag name on the tooltip for SCM tag actions, resulting in a stored XSS vulnerability exploitable by users able to control SCM tag names for these actions.

CVSS 3.1 · 5.4 Medium EPSS 1.0% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2019-10402

jenkins: XSS vulnerability in combobox form control

In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:combobox form control interpreted its item labels as HTML, resulting in a stored XSS vulnerability exploitable by users with permission to define its contents.

CVSS 3.1 · 5.4 Medium EPSS 1.0% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2019-10401

jenkins: Stored XSS vulnerability in expandable textbox form control

In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:expandableTextBox form control interpreted its content as HTML when expanded, resulting in a stored XSS vulnerability exploitable by users with permission to define its contents (typically Job/Configure).

CVSS 3.1 · 5.4 Medium EPSS 1.0% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2019-10384

jenkins: CSRF protection tokens for anonymous users did not expire in some circumstances (SECURITY-1491)

Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed users to obtain CSRF tokens without an associated web session ID, resulting in CSRF tokens that did not expire and could be used to bypass CSRF protection for the anonymous user.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed

Vendors

Jenkins Oracle Redhat

Products

Jenkins Communications Cloud Native Core Automated Test Suite Openshift and 1 more

CVE-2019-10383

jenkins: stored cross-site scripting in update center web pages (SECURITY-1453)

A stored cross-site scripting vulnerability in Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed attackers with Overall/Administer permission to configure the update site URL to inject arbitrary HTML and JavaScript in update center web pages.

CVSS 3.1 · 4.8 Medium EPSS 1.4% KEV · Not listed

Vendors

Jenkins Oracle Redhat

Products

Jenkins Communications Cloud Native Core Automated Test Suite Openshift and 1 more

CVE-2019-10354

jenkins: Unauthorized view fragment access (SECURITY-534)

A vulnerability in the Stapler web framework used in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier allowed attackers to access view fragments directly, bypassing permission checks and possibly obtain sensitive information.

CVSS 3.1 · 4.3 Medium EPSS 1.6% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift Openshift Container Platform