.. / CVE-2019-10405

Exploit for Jenkins <=2.196 - Cookie Exposure (CVE-2019-10405)

Description:

Jenkins through 2.196, LTS 2.176.3 and earlier prints the value of the cookie on the /whoAmI/ URL despite it being marked HttpOnly, thus making it possible to steal cookie-based authentication credentials if the URL is exposed or accessed via another cross-site scripting issue.

Nuclei Template

View the template here CVE-2019-10405.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2019/CVE-2019-10405.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2019-10405
https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1505
http://www.openwall.com/lists/oss-security/2019/09/25/3
https://github.com/ARPSyndicate/kenzer-templates