Missing permission check in Jenkins Active Directory Plugin allows accessing domain health check page

2022-05-2417:33:07

Google

osv.dev

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.2%

JSON

Jenkins Active Directory Plugin 2.19 and earlier does not perform a permission check in an HTTP endpoint.

This allows attackers with Overall/Read permission to access the domain health check diagnostic page.

Jenkins Active Directory Plugin 2.20 requires Overall/Administer permission to access the domain health check diagnostic page.

CPENameOperatorVersion
org.jenkins-ci.plugins:active-directoryeq1.41
org.jenkins-ci.plugins:active-directoryeq2.12
org.jenkins-ci.plugins:active-directoryeq1.18
org.jenkins-ci.plugins:active-directoryeq1.20
org.jenkins-ci.plugins:active-directoryeq1.25
org.jenkins-ci.plugins:active-directoryeq1.44
org.jenkins-ci.plugins:active-directoryeq2.7
org.jenkins-ci.plugins:active-directoryeq1.28
org.jenkins-ci.plugins:active-directoryeq2.6
org.jenkins-ci.plugins:active-directoryeq2.8

Name	Operator	Version
org.jenkins-ci.plugins:active-directory	eq	1.41
org.jenkins-ci.plugins:active-directory	eq	2.12
org.jenkins-ci.plugins:active-directory	eq	1.18
org.jenkins-ci.plugins:active-directory	eq	1.20
org.jenkins-ci.plugins:active-directory	eq	1.25
org.jenkins-ci.plugins:active-directory	eq	1.44
org.jenkins-ci.plugins:active-directory	eq	2.7
org.jenkins-ci.plugins:active-directory	eq	1.28
org.jenkins-ci.plugins:active-directory	eq	2.6
org.jenkins-ci.plugins:active-directory	eq	2.8