CVE-2022-43416

 

Published at: - 19-10-2022 06:15

Last modified: - 21-10-2022 05:16

Total changes: - 2

Description

Jenkins Katalon Plugin 1.0.32 and earlier implements an agent/controller message that does not limit where it can be executed and allows invoking Katalon with configurable arguments, allowing attackers able to control agent processes to invoke Katalon on the Jenkins controller with attacker-controlled version, install location, and arguments, and attackers additionally able to create files on the Jenkins controller (e.g., attackers with Item/Configure permission could archive artifacts) to invoke arbitrary OS commands.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2844
• [oss-security] 20221019 Multiple vulnerabilities in Jenkins plugins-Mailing List, Third Party Advisory

 

Keywords

NVD

 

CVE-2022-43416

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures