Bug 2074847 (CVE-2022-29036)

Summary:	CVE-2022-29036 credentials: Stored XSS vulnerabilities in jenkins plugin
Product:	[Other] Security Response	Reporter:	Avinash Hanwate <ahanwate>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	high	Docs Contact:
Priority:	high
Version:	unspecified	CC:	abenaiss, aos-bugs, bmontgom, eparis, jburrell, jokerman, nstielau, pbhattac, spandura, sponnaga, vkumar
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	credentials plugin 1112.vc87b_7a_3597f6, credentials plugin 1087.1089.v2f1b_9a_b_040e4, credentials plugin1074.1076.v39c30cecb_0e2, credentials plugin 2.6.1.1	Doc Type:	If docs needed, set a value
Doc Text:	A flaw was found in the Jenkins credentials plugin. The Jenkins credentials plugin does not escape the name and description of Credentials parameters on views displaying parameters. This issue results in a stored Cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-05-31 08:44:12 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2064010, 2076238, 2076239, 2076240, 2076241, 2076242, 2076243, 2079307
Bug Blocks:	2074888

Description Avinash Hanwate 2022-04-13 09:03:11 UTC

Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

https://www.jenkins.io/security/advisory/2022-04-12/

Comment 3 errata-xmlrpc 2022-05-18 12:01:06 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.9

Via RHSA-2022:2205 https://access.redhat.com/errata/RHSA-2022:2205

Comment 4 errata-xmlrpc 2022-05-31 05:42:08 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 3.11

Via RHSA-2022:2280 https://access.redhat.com/errata/RHSA-2022:2280

Comment 5 Product Security DevOps Team 2022-05-31 08:44:10 UTC

This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2022-29036

Comment 6 errata-xmlrpc 2022-06-10 04:25:22 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.7

Via RHSA-2022:4909 https://access.redhat.com/errata/RHSA-2022:4909

Comment 7 errata-xmlrpc 2022-06-17 05:38:28 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.6

Via RHSA-2022:4947 https://access.redhat.com/errata/RHSA-2022:4947