CVE-2019-1003080

Vulnerability

The Jenkins OpenShift Deployer Plugin is susceptible to a cross-site request forgery (CSRF) vulnerability in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validation method [1]. This allows attackers to initiate a connection to an attacker-specified server [1][3]. No specific version range is disclosed in the available references, but the advisory indicates the plugin is affected [1].

Exploitation

To exploit this vulnerability, an attacker must trick a Jenkins user (who has proper permissions) into performing actions, such as clicking a crafted link [1]. No authentication is required for the attacker, but the victim must have access to Jenkins. The attacker can then forge requests to the vulnerable endpoint [1].

Impact

Successful exploitation allows an attacker to initiate a connection from the Jenkins server to an attacker-controlled server [1][3]. This could be used for network reconnaissance, data exfiltration, or as part of a larger attack chain. The exact impact depends on the attacker's objectives and the network environment.

Mitigation

Jenkins has not yet released a fix for this vulnerability; users are advised to watch the Jenkins security advisory page [1]. No workarounds are mentioned in the available references. The plugin may be considered affected and should be updated when a patch becomes available [1].