Executive Summary

This vulnerability exists in Jenkins versions 2.567 and earlier, including LTS 2.555.2 and earlier. It allows attackers to submit a specially crafted config.xml file that causes Jenkins to deserialize arbitrary types defined in Jenkins core or plugins. This deserialization enables the attacker to handle HTTP requests afterward.

Essentially, the attacker can impersonate any user and send HTTP requests on their behalf, potentially using the Script Console to execute arbitrary code or read arbitrary files from the Jenkins controller.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is severe. An attacker exploiting it can impersonate any user within Jenkins, which may lead to unauthorized actions being performed.

• Execution of arbitrary code on the Jenkins controller via the Script Console.
• Reading arbitrary files from the Jenkins controller, potentially exposing sensitive information.
• Sending HTTP requests on behalf of legitimate users, which could lead to further attacks or unauthorized operations.

Useful 0 Not Useful 0