CVE-2022-34201

Vulnerability

Description

The Jenkins Convertigo Mobile Platform Plugin, in versions 1.1 and earlier, contains a missing permission check. This flaw originates from the plugin's failure to verify that a user has the appropriate permissions before performing a URL connection action [1][2].

Exploitation

Attackers who have been granted the Overall/Read permission in Jenkins can exploit this vulnerability. They can cause the plugin to connect to an attacker-specified URL, effectively using the Jenkins server as a proxy to reach arbitrary external resources [2]. No additional authentication is required beyond the minimal overall read access.

Impact

Successful exploitation allows an attacker to conduct server-side request forgery (SSRF) attacks. This can be used to scan internal networks, access cloud metadata endpoints, or interact with other systems that are reachable from the Jenkins server, potentially leading to information disclosure or further compromise [2].

Mitigation

The vulnerability is addressed in the Jenkins Security Advisory 2022-06-22. Users should update the Convertigo Mobile Platform Plugin to a version that includes the proper permission check. No workaround is provided [1]. The plugin's repository indicates it integrates Convertigo Mobility Platform projects into Jenkins CI [3].