CVE-2016-3102

2017-02-0915:59:01

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.7%

JSON

The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs (1) direct field access or (2) get/set array operations.

CPENameOperatorVersion
script-security-plugineqscript-security-1.0-beta-3
script-security-plugineqscript-security-1.0-beta-4
script-security-plugineqscript-security-1.0-beta-5
script-security-plugineqscript-security-1.1
script-security-plugineqscript-security-1.0
script-security-plugineqscript-security-1.0-beta-1
script-security-plugineqscript-security-1.0-beta-2
script-security-plugineqscript-security-1.0-beta-6

Name	Operator	Version
script-security-plugin	eq	script-security-1.0-beta-3
script-security-plugin	eq	script-security-1.0-beta-4
script-security-plugin	eq	script-security-1.0-beta-5
script-security-plugin	eq	script-security-1.1
script-security-plugin	eq	script-security-1.0
script-security-plugin	eq	script-security-1.0-beta-1
script-security-plugin	eq	script-security-1.0-beta-2
script-security-plugin	eq	script-security-1.0-beta-6