Impact
In GoCD versions from 20.5.0 and below 23.1.0, if the server environment is not correctly configured by administrators to provide access to the relevant PostgreSQL or MySQL backup tools, the credentials for database access may be unintentionally leaked to admin alerts on the GoCD user interface.
The vulnerability is triggered only if the GoCD server host is misconfigured to have backups enabled, but does not have access to the pg_dump or mysqldump utility tools to backup the configured database type (PostgreSQL or MySQL respectively). In such cases, failure to launch the expected backup utility reports the shell environment used to attempt to launch in the server admin alert, which includes the plaintext database password supplied to the configured tool. This vulnerability does not affect backups of the default on-disk H2 database that GoCD is configured to use.
Patches
Fixed in GoCD 23.1.0.
Workarounds
Disable backups, or administrators should ensure that the required pg_dump (PostgreSQL) or mysqldump (MySQL) binaries are available on the GoCD server when backups of these database types are configured.
References
For more information
If you have any questions or comments about this advisory:
infoatb Reporter
chadlwilson Remediation developer
Impact
In GoCD versions from 20.5.0 and below 23.1.0, if the server environment is not correctly configured by administrators to provide access to the relevant PostgreSQL or MySQL backup tools, the credentials for database access may be unintentionally leaked to admin alerts on the GoCD user interface.
The vulnerability is triggered only if the GoCD server host is misconfigured to have backups enabled, but does not have access to the
pg_dumpormysqldumputility tools to backup the configured database type (PostgreSQL or MySQL respectively). In such cases, failure to launch the expected backup utility reports the shell environment used to attempt to launch in the server admin alert, which includes the plaintext database password supplied to the configured tool. This vulnerability does not affect backups of the default on-disk H2 database that GoCD is configured to use.Patches
Fixed in GoCD 23.1.0.
Workarounds
Disable backups, or administrators should ensure that the required
pg_dump(PostgreSQL) ormysqldump(MySQL) binaries are available on the GoCD server when backups of these database types are configured.References
For more information
If you have any questions or comments about this advisory: