CVE-2023-24431

Vulnerability

Description

The Jenkins Orka by MacStadium Plugin versions 1.31 and earlier lack a permission check in an unspecified endpoint. This allows attackers with Overall/Read permission to enumerate credentials IDs stored in Jenkins by exploiting the missing authorization check [1].

Exploitation

An attacker needs only Overall/Read permission, which is typically granted to low-privileged users. No special network position or authentication beyond a valid Jenkins user is required. The vulnerability can be triggered remotely via a crafted request [1].

Impact

Successful exploitation reveals credential IDs, which are unique identifiers used to reference credentials in Jenkins. While the credentials themselves (passwords, tokens) are not exposed, the IDs can be used in subsequent attacks, such as crafting requests to use or delete credentials, or to enumerate further [1].

Mitigation

Jenkins has released a fix in version 1.32 of the Orka by MacStadium Plugin. Users are advised to upgrade to this version or later. No workarounds are known [1].