GHSA-rmp9-mc8w-mqf3

Source

https://github.com/advisories/GHSA-rmp9-mc8w-mqf3

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-rmp9-mc8w-mqf3/GHSA-rmp9-mc8w-mqf3.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-rmp9-mc8w-mqf3

Aliases

CVE-2020-2188

Published

2022-05-24T17:17:14Z

Modified

2023-11-08T04:02:55.688739Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

Users with Overall/Read access can enumerate credentials IDs in Amazon EC2 Plugin

Details

Amazon EC2 Plugin provides a list of applicable credentials IDs to allow users configuring the plugin to select the one to use.

This functionality does not correctly check permissions in Amazon EC2 Plugin 1.50.1 and earlier, allowing any user with Overall/Read permission to get a list of valid credentials IDs. Those can be used as part of an attack to capture the credentials using another vulnerability.

An enumeration of credentials IDs in Amazon EC2 Plugin 1.50.2 now requires Overall/Administer permission.

Database specific

{
    "nvd_published_at": "2020-05-06T13:15:00Z",
    "github_reviewed_at": "2022-12-16T22:48:38Z",
    "severity": "MODERATE",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-285",
        "CWE-863"
    ]
}

References

Affected packages

Maven / org.jenkins-ci.plugins:ec2

Package

Name: org.jenkins-ci.plugins:ec2; View open source insights on deps.dev
Purl: pkg:maven/org.jenkins-ci.plugins/ec2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.50.2

Affected versions

1.*

1.11

1.12

1.13

1.14

1.15

1.16

1.17

1.18

1.19

1.20

1.21

1.22

1.23

1.24

1.25

1.26

1.27

1.28

1.29

1.30

1.31

1.32

1.33

1.34

1.35

1.36

1.37

1.38

1.39

1.40

1.40.1

1.41

1.41.1

1.42

1.42.1

1.42.2

1.43

1.44

1.44.1

1.45

1.46

1.46.1

1.46.2

1.46.3

1.46.4

1.47

1.48

1.49

1.49.1

1.49.2

1.49.3

1.50

1.50.1

Database specific

{
    "last_known_affected_version_range": "<= 1.50.1"
}