Jenkins Script Security Plugin Missing Permission Check Vulnerability Allowing Classpath Enumeration

A vulnerability exists in the Jenkins Script Security Plugin in versions through 1399.ve6a_66547f6e1, where a missing permission check allows users with Overall/Read permission to enumerate both pending and approved Script Security classpaths. This issue arises because the plugin does not properly validate permissions in an HTTP endpoint, enabling unauthorized access to sensitive classpath information.

Impact

Exploitation of this vulnerability could lead to unauthorized enumeration of Script Security classpaths, potentially allowing attackers to manipulate or interfere with script approvals and classpath configurations.

Remediation

Users of the Script Security Plugin should update to version 1402.v94c9ce464861, which addresses this vulnerability by requiring Overall/Administer permission to enumerate Script Security classpaths.