CVE-2023-32261: Missing permission check in Jenkins Dimensions Plugin allows enumerating credentials IDs

July 19, 2023 (updated October 29, 2024)

Dimensions Plugin 0.9.3 and earlier does not perform a permission check in an HTTP endpoint.

This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability.

An enumeration of credentials IDs in Dimensions Plugin 0.9.3.1 requires the appropriate permissions.

References

github.com/advisories/GHSA-27pr-r7hm-c2rc
nvd.nist.gov/vuln/detail/CVE-2023-32261
plugins.jenkins.io/dimensionsscm
portal.microfocus.com/s/article/KM000019297
www.jenkins.io/security/advisory/2023-06-14
www.jenkins.io/security/advisory/2023-06-14/

Code Behaviors & Features

Detect and mitigate CVE-2023-32261 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →