CVE-2018-1000421 Server-side request forgery vulnerability in Jenkins Mesos Plugin

What is CVE-2018-1000421?

CVE-2018-1000421 is a medium-severity server-side request forgery vulnerability in n/a, published on 9 Jan 2019. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to initiate a test connection to an attacker-specified Mesos server with attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Weakness: CWE-918

Which versions are affected by CVE-2018-1000421?

2 open source packages ship an affected version, including org.jenkins-ci.plugins:mesos. It affects 1 product.

Products include Apache Mesos.

How do I fix CVE-2018-1000421?

Upgrade org.jenkins-ci.plugins:mesos to 0.18 or later.

Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.

Is CVE-2018-1000421 being exploited?

There is no known exploitation of CVE-2018-1000421 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2019-5736 Privilege escalation in n/a High 8.6
• CVE-2019-0204 Docker image code execution with Apache Mesos High 7.8
• CVE-2018-11793 Stack Overflow in Apache Mesos High 7.5
• CVE-2018-1330 Crash when decoding malformed HTTP requests or malformed JSON payload High 7.5
• CVE-2017-7687 Denial of service in Apache Mesos High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-5q7j-8hpc-4848.