Jenkins Puppet Enterprise Pipeline 1.3.1 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code.
CPE | Name | Operator | Version |
---|---|---|---|
puppet_enterprise_pipeline | le | 1.3.1 |