Lucene search
PRIOn knowledge basePRION:CVE-2019-1003024HistoryFeb 20, 2019 - 9:29 p.m.
Security feature bypass
2019-02-2021:29:00
PRIOn knowledge base
www.prio-n.com
6
A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.52 and earlier in RejectASTTransformsCustomizer.java that allows attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.
| CPE | Name | Operator | Version |
|---|---|---|---|
| script_security | le | 1.52 | |
| openshift_container_platform | eq | 3.11 |
Related
redhatcve
redhatcve
CVE-2019-1003024
2020-04-03 14:12:41
nvd
nvd
CVE-2019-1003024
2019-02-20 21:29:00
cvelist
cvelist
CVE-2019-1003024
2019-02-20 21:00:00
osv
osv
CVE-2019-1003024
2019-02-20 21:29:00
Jenkins Script Security Plugin sandbox bypass vulnerability
2022-05-13 01:15:21
cve
cve
CVE-2019-1003024
2019-02-20 21:29:00
veracode
veracode
Sandbox Protection Bypass
2019-05-16 03:58:57
github
github
Jenkins Script Security Plugin sandbox bypass vulnerability
2022-05-13 01:15:21
redhat
redhat
nessus
nessus