Lucene search
PRIOn knowledge basePRION:CVE-2018-1000865HistoryDec 10, 2018 - 2:29 p.m.
Security feature bypass
2018-12-1014:29:00
PRIOn knowledge base
www.prio-n.com
4
0.003 Low
EPSS
Percentile
71.2%
A sandbox bypass vulnerability exists in Script Security Plugin 1.47 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM, if plugins using the Groovy sandbox are installed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| script_security | le | 1.47 | |
| openshift_container_platform | eq | 3.11 |
Related
osv
osv
Improper Privilege Management in Jenkins
2022-05-13 01:48:40
CVE-2018-1000865
2018-12-10 14:29:01
cvelist
cvelist
CVE-2018-1000865
2018-12-10 14:00:00
nvd
nvd
CVE-2018-1000865
2018-12-10 14:29:01
cve
cve
CVE-2018-1000865
2018-12-10 14:29:01
veracode
veracode
Sandbox Restrictions Bypass
2019-05-16 03:24:00
github
github
Improper Privilege Management in Jenkins
2022-05-13 01:48:40
redhatcve
redhatcve
CVE-2018-1000866
2020-04-08 20:50:40
CVE-2018-1000865
2019-10-23 18:34:18