CVE-2022-25199

EUVD-2022-1207 · Published Feb 16, 2022

Missing permission check in Jenkins SCP publisher Plugin SCP publisher Plugin 1.8 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials. Additionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.

Technologies

Jenkins Scp Publisher

Weaknesses

CWE-862

CVSS scores

v3.18.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Persistence Stealth Defense Impairment Credential Access

T1190Exploit Public-Facing Application T1211Exploitation for Stealth T1542.002Component Firmware T1556Modify Authentication Process

References

https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2323
https://nvd.nist.gov/vuln/detail/CVE-2022-25199
https://github.com/jenkinsci/scp-plugin

Potentially impacted assets

See if this affects your attack surface