{"containers": {"cna": {"affected": [{"product": "Jenkins Pipeline: Shared Groovy Libraries Plugin", "vendor": "Jenkins project", "versions": [{"lessThanOrEqual": "552.vd9cc05b8a2e1", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "2.21", "versionType": "custom"}, {"status": "unaffected", "version": "2.21.1"}]}], "descriptions": [{"lang": "en", "value": "Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache directories without any sanitization, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM using specially crafted library names if a global Pipeline library configured to use caching already exists."}], "providerMetadata": {"orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b", "shortName": "jenkins", "dateUpdated": "2023-10-24T14:19:41.540Z"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2586"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "jenkinsci-cert@googlegroups.com", "ID": "CVE-2022-25183", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Jenkins Pipeline: Shared Groovy Libraries Plugin", "version": {"version_data": [{"version_affected": "<=", "version_value": "552.vd9cc05b8a2e1"}, {"version_affected": ">=", "version_value": "2.21"}, {"version_affected": "!", "version_value": "2.21.1"}]}}]}, "vendor_name": "Jenkins project"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache directories without any sanitization, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM using specially crafted library names if a global Pipeline library configured to use caching already exists."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-693: Protection Mechanism Failure"}]}]}, "references": {"reference_data": [{"name": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2586", "refsource": "CONFIRM", "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2586"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T04:36:06.299Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2586"}]}]}, "cveMetadata": {"assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b", "assignerShortName": "jenkins", "cveId": "CVE-2022-25183", "datePublished": "2022-02-15T16:11:07", "dateReserved": "2022-02-15T00:00:00", "dateUpdated": "2024-08-03T04:36:06.299Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:jenkins:pipeline\\:shared_groovy_libraries:*:*:*:*:*:jenkins:*:*", "matchCriteriaId": "7710DFDC-CED2-46CA-A221-8F025DF48358", "versionEndIncluding": "552.vd9cc05b8a2e1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache directories without any sanitization, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM using specially crafted library names if a global Pipeline library configured to use caching already exists."}, {"lang": "es", "value": "Jenkins Pipeline: Shared Groovy Libraries Plugin versiones 552.vd9cc05b8a2e1 y anteriores, usan los nombres de las bibliotecas de Pipeline para crear directorios de cach\u00e9 sin ning\u00fan tipo de saneo, lo que permite a atacantes con permiso de Item/Configure ejecutar c\u00f3digo arbitrario en el contexto de la JVM del controlador de Jenkins usando nombres de bibliotecas especialmente dise\u00f1ados si ya se presenta una biblioteca global de Pipeline configurada para usar la cach\u00e9"}], "id": "CVE-2022-25183", "lastModified": "2023-12-21T21:54:23.297", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-02-15T17:15:09.197", "references": [{"source": "jenkinsci-cert@googlegroups.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2586"}], "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2022:1420", "cpe": "cpe:/a:redhat:openshift:3.11::el7", "package": "jenkins-2-plugins-0:3.11.1650371376-1.el7", "product_name": "Red Hat OpenShift Container Platform 3.11", "release_date": "2022-04-27T00:00:00Z"}, {"advisory": "RHSA-2022:1025", "cpe": "cpe:/a:redhat:openshift:4.10::el8", "package": "jenkins-2-plugins-0:4.10.1647505461-1.el8", "product_name": "Red Hat OpenShift Container Platform 4.10", "release_date": "2022-03-28T00:00:00Z"}, {"advisory": "RHSA-2022:1620", "cpe": "cpe:/a:redhat:openshift:4.6::el8", "package": "jenkins-2-plugins-0:4.6.1650364520-1.el8", "product_name": "Red Hat OpenShift Container Platform 4.6", "release_date": "2022-05-04T00:00:00Z"}, {"advisory": "RHSA-2022:1248", "cpe": "cpe:/a:redhat:openshift:4.7::el8", "package": "jenkins-2-plugins-0:4.7.1648800585-1.el8", "product_name": "Red Hat OpenShift Container Platform 4.7", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:0871", "cpe": "cpe:/a:redhat:openshift:4.8::el8", "package": "jenkins-2-plugins-0:4.8.1646993358-1.el8", "product_name": "Red Hat OpenShift Container Platform 4.8", "release_date": "2022-03-22T00:00:00Z"}, {"advisory": "RHSA-2022:1021", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "package": "jenkins-2-plugins-0:4.9.1647580879-1.el8", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-03-29T00:00:00Z"}], "bugzilla": {"description": "workflow-cps-global-lib: Sandbox bypass vulnerability", "id": "2055802", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2055802"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.8", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "verified"}, "cwe": "CWE-179", "details": ["Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache directories without any sanitization, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM using specially crafted library names if a global Pipeline library configured to use caching already exists.", "A flaw was found in Jenkins. The Pipeline: Shared Groovy Libraries plugin uses the names of Pipeline libraries to create cache directories without any sanitization. This flaw allows attackers with item/configure permission to execute arbitrary code in the context of the Jenkins controller JVM, using specially crafted library names if a global Pipeline library configured to use caching already exists."], "name": "CVE-2022-25183", "public_date": "2022-02-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2022-25183\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-25183"], "threat_severity": "Important"}