Vulnerability Spotlight: Multiple bugs in several Jenkins plugins
Summary: Cisco Talos disclosed information disclosure vulnerabilities in three Jenkins plugins - Swarm (version 3.14, CVE-2019-5022), Ansible Tower (0.9.1, CVE-2019-5025) and GitLab (1.5.11, CVE-2019-5027) - that could let an attacker trick a plugin into sending credentials from the Jenkins credential database to a server they control. A June 4, 2019 update added the Artifactory plugin (versions 3.2.0 and 3.2.1, CVE-2019-10323), where a crafted HTTP request from a user with Overall/Read permissions, such as an anonymous user if enabled, can disclose credential identifiers.
Bottom line: In the Ansible Tower and GitLab cases, a user with only Overall/Read permissions - an anonymous user if that is enabled - can pull credentials out of the Jenkins credential database, and the GET-based requests can also be fired via CSRF, so the bar for an attacker is low.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-10323CVE-2019-5022CVE-2019-5025CVE-2019-5027
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026