CVE-2020-2288 Incorrect default pattern in Jenkins Audit Trail Plugin
Attackers can bypass audit trail logging by appending ignored suffixes to URLs, hiding malicious activity from administrators.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-2288?
CVE-2020-2288 is a medium-severity vulnerability in Jenkins Audit Trail Plugin, published on 8 Oct 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Jenkins Audit Trail Plugin 3.6 and earlier, the default regular expression pattern could be bypassed in many cases by adding a suffix to the URL that would be ignored during request handling.
Which versions are affected by CVE-2020-2288?
2 open source packages ship an affected version, including org.jenkins-ci.plugins:audit-trail. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
org.jenkins-ci.plugins:audit-trail Maven | All versions | 3.7 |
org.jenkins-ci.plugins:audit-trail Maven | All versions | 3.7 |
Products include Jenkins Audit Trail.
How do I fix CVE-2020-2288?
Upgrade org.jenkins-ci.plugins:audit-trail to 3.7 or later.
Is CVE-2020-2288 being exploited?
There is no known exploitation of CVE-2020-2288 in the wild and no public exploit code.
Other vulnerabilities in Jenkins Audit Trail Plugin
Sources
Also known as GHSA-7v9p-34r2-q668.