Lucene search
PRIOn knowledge basePRION:CVE-2019-1003001HistoryJan 22, 2019 - 2:29 p.m.
Security feature bypass
2019-01-2214:29:00
PRIOn knowledge base
www.prio-n.com
7
A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.61 and earlier in src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowDefinition.java, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShellFactory.java that allows attackers with Overall/Read permission to provide a pipeline script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openshift_container_platform | eq | 3.11 |
References
packetstormsecurity.com/files/152132/Jenkins-ACL-Bypass-Metaprogramming-Remote-Code-Execution.html
www.rapid7.com/db/modules/exploit/multi/http/jenkins_metaprogramming
access.redhat.com/errata/RHBA-2019:0326
access.redhat.com/errata/RHBA-2019:0327
jenkins.io/security/advisory/2019-01-08/
www.exploit-db.com/exploits/46572/
Related
github
github
Jenkins Groovy Plugin sandbox bypass vulnerability
2022-05-13 01:15:20
osv
osv
Jenkins Groovy Plugin sandbox bypass vulnerability
2022-05-13 01:15:20
CVE-2019-1003001
2019-01-22 14:29:00
cve
cve
CVE-2019-1003001
2019-01-22 14:29:00
redhatcve
redhatcve
CVE-2019-1003001
2019-01-25 14:20:13
checkpoint_advisories
checkpoint_advisories
Jenkins Pipeline Groovy Remote Code Execution (CVE-2019-1003001)
2020-02-11 00:00:00
nvd
nvd
CVE-2019-1003001
2019-01-22 14:29:00
cvelist
cvelist
CVE-2019-1003001
2019-01-22 14:00:00
veracode
veracode
Sandbox Restrictions Bypass
2019-05-16 03:24:07
nessus
nessus
Jenkins Security Advisory 2019-01-08 Multiple Vulnerabilities
2019-09-24 00:00:00
packetstorm
packetstorm
Jenkins ACL Bypass / Metaprogramming Remote Code Execution
2019-03-19 00:00:00