CVE-2019-10355

🗓️ 31 Jul 2019 12:45:21Reported by jenkinsType

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of type casts allowed attackers to execute arbitrary code in sandboxed scripts

Reporter	Title	Published	Views	Family All 21
BDU FSTEC	The vulnerability of the Jenkins Script Security plugin, related to incorrect type conversion, allows attackers to execute arbitrary code or gain unauthorized access to confidential information.	13 Aug 201900:00	–	bdu_fstec
CNVD	CloudBees Jenkins Script Security plugin security feature issue vulnerability (CNVD-2019-26374)	2 Aug 201900:00	–	cnvd
CVE	CVE-2019-10355	31 Jul 201912:45	–	cve
EUVD	EUVD-2022-4680	3 Oct 202520:07	–	euvd
Github Security Blog	Incorrect Privilege Assignment in Jenkins Script Security Plugin	24 May 202216:51	–	github
NVD	CVE-2019-10355	31 Jul 201913:15	–	nvd
OSV	GHSA-P56J-X44H-G66J Incorrect Privilege Assignment in Jenkins Script Security Plugin	24 May 202216:51	–	osv
OSV	RHSA-2019:2651 Red Hat Security Advisory: Red Hat OpenShift Container Platform 3.11 jenkins-2-plugins security update	16 Sep 202402:51	–	osv
OSV	RHSA-2019:2662 Red Hat Security Advisory: Red Hat OpenShift Container Platform 4.1 jenkins-2-plugins security update	16 Sep 202402:51	–	osv
Prion	Security feature bypass	31 Jul 201913:15	–	prion

[
  {
    "product": "Jenkins Script Security Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "status": "affected",
        "version": "1.61 and earlier"
      }
    ]
  }
]

Source	Link
access	www.access.redhat.com/errata/RHSA-2019:2594
jenkins	www.jenkins.io/security/advisory/2019-07-31/
access	www.access.redhat.com/errata/RHSA-2019:2662
openwall	www.openwall.com/lists/oss-security/2019/07/31/1
access	www.access.redhat.com/errata/RHSA-2019:2651

24 Oct 2023 16:48Current

8.9High risk

Vulners AI Score8.9

EPSS0.00041