Lucene search

Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin

🗓️ 19 Oct 2022 19:21:00Reported by GoogleType

osv🔗 osv.dev👁 19 Views

Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin allows attackers to execute arbitrary code in Jenkins controller JVM

Reporter	Title	Published	Views	Family All 24
Github Security Blog	Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin	19 Oct 202219:00	–	github
RedhatCVE	CVE-2022-43406	20 Oct 202206:17	–	redhatcve
Cvelist	CVE-2022-43406	19 Oct 202200:00	–	cvelist
NVD	CVE-2022-43406	19 Oct 202216:15	–	nvd
Prion	Security feature bypass	19 Oct 202216:15	–	prion
Veracode	Arbitrary Code Execution	7 Mar 202300:49	–	veracode
AlpineLinux	CVE-2022-43406	19 Oct 202216:15	–	alpinelinux
CVE	CVE-2022-43406	19 Oct 202216:15	–	cve
RedHat Linux	(RHSA-2023:1064) Critical: OpenShift Developer Tools and Services for OCP 4.12 security update	6 Mar 202308:55	–	redhat
RedHat Linux	(RHSA-2023:0560) Critical: OpenShift Container Platform 4.10.51 security update	8 Feb 202318:32	–	redhat

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-43406
jenkins	www.jenkins.io/security/advisory/2022-10-19/
openwall	www.openwall.com/lists/oss-security/2022/10/19/3

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Oct 2022 19:00Current

2.8Low risk

Vulners AI Score2.8

CVSS39.9

EPSS0.001