CVE-2023-37945 Jenkins SAML Single Sign On(SSO) Plugin missing permission check

Medium 4.3 Published 12 Jul 2023 Updated 7 Nov 2024

Attackers with Read permission can download security realm details due to missing permission checks in the Jenkins SAML SSO Plugin.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2023-37945?

CVE-2023-37945 is a medium-severity missing authorization vulnerability in Jenkins SAML Single Sign On(SSO) Plugin, published on 12 Jul 2023. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows attackers with Overall/Read permission to download a string representation of the current security realm.

Weakness: CWE-862

Which versions are affected by CVE-2023-37945?

2 open source packages ship an affected version, including io.jenkins.plugins:miniorange-saml-sp. It affects 1 product.

Package	Affected	Fixed in
`io.jenkins.plugins:miniorange-saml-sp` Maven	All versions	`2.3.1`
`io.jenkins.plugins:miniorange-saml-sp` Maven	All versions	`2.3.1`

Products include Jenkins Saml Single Sign On.

How do I fix CVE-2023-37945?

Upgrade io.jenkins.plugins:miniorange-saml-sp to 2.3.1 or later.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2023-37945 being exploited?

There is no known exploitation of CVE-2023-37945 in the wild and no public exploit code.

Sources

Also known as GHSA-p4wr-9wfm-f9jw.