CVE-2019-10342

Vulnerability

CVE-2019-10342 is a missing permission check in the Jenkins Docker Plugin (versions 1.1.6 and earlier). The fillCredentialsIdItems methods did not verify that the user had the required permissions, allowing users with Overall/Read access to enumerate credentials IDs stored in Jenkins [1][2].

Exploitation

An attacker with only Overall/Read permission could exploit this by triggering the fillCredentialsIdItems methods to obtain a list of valid credential IDs. This enumeration could then be combined with another vulnerability (such as CVE-2019-10340, a CSRF and permission check issue in the same plugin) to capture the actual credentials [2].

Impact

Successful exploitation allows an attacker to learn which credential IDs exist, aiding in targeted attacks. While the IDs themselves are not the full credentials, they provide the necessary information to leverage other flaws to capture the credentials [2][3].

Mitigation

The vulnerability is fixed in Docker Plugin version 1.1.7, released July 11, 2019. Users should upgrade immediately. No other workarounds are mentioned in the advisory [2][3].