Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

jenkinsci/ec2-plugin

              master @ 86eb364
            

Fixes

CVEs

HIGH

Peak severity

10.0%

Coverage

Highlights

Auth Bypass: 3 prior fixes. Scrutinize any change in this area.

src/main/java/hudson/plugins/ec2/ssh/EC2UnixLauncher.java: most-fixed (3 issues). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Missing permission validations on sensitive properties like remoteAdmin, jvmopts, and tmpDir in SlaveTemplate allowed users to bypass security controls. These properties can lead to unauthorized remote code execution on agents if they are not explicitly protected by RUN_SCRIPTS permission checks.

Auth Bypass: Unprotected FormValidation and ListBoxModel binding endpoints allowed administrative operations or credential checks without valid permissions, requiring explicit ADMINISTER permission checks and HTTP POST method enforcement.

Auth Bypass: Deploying SSH connections to EC2 agents without strict verification strategies (such as Check New Hard or Check New Soft) left the connection open to Man-in-the-Middle (MitM) attacks.