CVE-2019-1003045

Vulnerability

A vulnerability in the Jenkins ECS Publisher Plugin [1] versions 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory, to obtain the API token configured in the plugin's configuration. The token is stored in plaintext and can be accessed without authentication if the attacker has the necessary permissions or file system access.

Exploitation

An attacker must have either Item/Extended Read permission on the Jenkins configuration, or direct access to the Jenkins home directory on the file system. With these privileges, the attacker can read the configuration file that contains the API token in plaintext, thereby extracting the token.

Impact

Successful exploitation results in disclosure of the ECS API token, which can be used to authenticate to Amazon ECS and potentially perform actions with the same privileges as the Jenkins instance. This may lead to unauthorized access to cloud resources and data breaches.

Mitigation

The vulnerability is fixed in Jenkins ECS Publisher Plugin version 1.1 and later [1]. Users should upgrade to version 1.1 or higher as soon as possible. No workaround is available. The plugin is not listed on the CISA Known Exploited Vulnerabilities (KEV) catalog.