GHSA-jm4g-8rvq-v87j

Incorrect permission check in XebiaLabs XL Deploy Plugin allows capturing credentials

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-21664

Packages

Ecosystem	Package	Affected	Fixed in
Maven	com.xebialabs.deployit.ci:deployit-plugin	< 10.0.2	10.0.2

Details

As written in the advisory (Markdown source, shown as plain text).

An incorrect permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Generic Create permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in Jenkins. The permission check was partially fixed in XebiaLabs XL Deploy Plugin 7.5.9: A permission check was added, but for the wrong permission, still allowing some non-admin users to access the form validation method.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2021-21664 advisory
https://github.com/jenkinsci/xldeploy-plugin/commit/79ae204d2ee6cd94badf4c24a150cee13a3bde44 web
https://github.com/jenkinsci/xldeploy-plugin package
https://www.jenkins.io/security/advisory/2021-06-10/#SECURITY-1982 web
http://www.openwall.com/lists/oss-security/2021/06/10/14 web