Lucene search

Veracode Vulnerability DatabaseVERACODE:20661

HistoryJul 08, 2019 - 12:06 a.m.

Sandbox Restrictions Bypass

2019-07-0800:06:47

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

66.3%

JSON

Jenkins Pipeline Remote Loader Plugin is vulnerable to sandbox restrictions bypass vulnerability. A remote authenticated attacker to bypass security restrictions, caused by an unsafe whitelist entry issue by sending a specially-crafted request.

CPENameOperatorVersion
golang-github-openshift-oauth-proxyeq3.11.88__1.git.2.31f54b1.el7
golang-github-openshift-oauth-proxyeq3.11.82__1.git.425.7cac034.el7
golang-github-openshift-oauth-proxyeq3.11.51__1.git.419.1af74df.el7
golang-github-openshift-oauth-proxyeq3.11.104__1.git.1.a3cbeb1.el7
golang-github-openshift-oauth-proxyeq3.11.98__1.git.0.fd9716c.el7
golang-github-openshift-oauth-proxyeq3.11.43__1.git.419.03122b3.el7
golang-github-openshift-oauth-proxyeq3.11.69__1.git.421.90ff9d0.el7
golang-github-openshift-oauth-proxyeq2.3__1.git57b68632.el7
golang-github-openshift-oauth-proxyeq2.1__2.git885c9f40.el7
golang-github-openshift-oauth-proxyeq3.11.59__1.git.419.7d96cfa.el7

Name	Operator	Version
golang-github-openshift-oauth-proxy	eq	3.11.88__1.git.2.31f54b1.el7
golang-github-openshift-oauth-proxy	eq	3.11.82__1.git.425.7cac034.el7
golang-github-openshift-oauth-proxy	eq	3.11.51__1.git.419.1af74df.el7
golang-github-openshift-oauth-proxy	eq	3.11.104__1.git.1.a3cbeb1.el7
golang-github-openshift-oauth-proxy	eq	3.11.98__1.git.0.fd9716c.el7
golang-github-openshift-oauth-proxy	eq	3.11.43__1.git.419.03122b3.el7
golang-github-openshift-oauth-proxy	eq	3.11.69__1.git.421.90ff9d0.el7
golang-github-openshift-oauth-proxy	eq	2.3__1.git57b68632.el7
golang-github-openshift-oauth-proxy	eq	2.1__2.git885c9f40.el7
golang-github-openshift-oauth-proxy	eq	3.11.59__1.git.419.7d96cfa.el7

Rows per page:

1-10 of 17021

References

www.openwall.com/lists/oss-security/2019/05/31/2

www.securityfocus.com/bid/108540

access.redhat.com/errata/RHBA-2019:1605

access.redhat.com/security/cve/CVE-2019-1003049

access.redhat.com/security/cve/CVE-2019-1003050

access.redhat.com/security/cve/CVE-2019-10320

access.redhat.com/security/cve/CVE-2019-10328

bugzilla.redhat.com/show_bug.cgi?id=1418021

bugzilla.redhat.com/show_bug.cgi?id=1571190

bugzilla.redhat.com/show_bug.cgi?id=1585070

bugzilla.redhat.com/show_bug.cgi?id=1600741

bugzilla.redhat.com/show_bug.cgi?id=1608260

bugzilla.redhat.com/show_bug.cgi?id=1624316

bugzilla.redhat.com/show_bug.cgi?id=1631687

bugzilla.redhat.com/show_bug.cgi?id=1639427

bugzilla.redhat.com/show_bug.cgi?id=1640382

bugzilla.redhat.com/show_bug.cgi?id=1645656

bugzilla.redhat.com/show_bug.cgi?id=1648973

bugzilla.redhat.com/show_bug.cgi?id=1651564

bugzilla.redhat.com/show_bug.cgi?id=1652746

bugzilla.redhat.com/show_bug.cgi?id=1656083

bugzilla.redhat.com/show_bug.cgi?id=1656487

bugzilla.redhat.com/show_bug.cgi?id=1661076

bugzilla.redhat.com/show_bug.cgi?id=1667063

bugzilla.redhat.com/show_bug.cgi?id=1667801

bugzilla.redhat.com/show_bug.cgi?id=1671315

bugzilla.redhat.com/show_bug.cgi?id=1671837

bugzilla.redhat.com/show_bug.cgi?id=1676399

bugzilla.redhat.com/show_bug.cgi?id=1680059

bugzilla.redhat.com/show_bug.cgi?id=1682924

bugzilla.redhat.com/show_bug.cgi?id=1688250

bugzilla.redhat.com/show_bug.cgi?id=1688318

bugzilla.redhat.com/show_bug.cgi?id=1689230

bugzilla.redhat.com/show_bug.cgi?id=1689796

bugzilla.redhat.com/show_bug.cgi?id=1690066

bugzilla.redhat.com/show_bug.cgi?id=1691023

bugzilla.redhat.com/show_bug.cgi?id=1694724

bugzilla.redhat.com/show_bug.cgi?id=1695903

bugzilla.redhat.com/show_bug.cgi?id=1696249

bugzilla.redhat.com/show_bug.cgi?id=1698018

bugzilla.redhat.com/show_bug.cgi?id=1698922

bugzilla.redhat.com/show_bug.cgi?id=1699533

bugzilla.redhat.com/show_bug.cgi?id=1699696

bugzilla.redhat.com/show_bug.cgi?id=1700875

bugzilla.redhat.com/show_bug.cgi?id=1701806

bugzilla.redhat.com/show_bug.cgi?id=1702544

bugzilla.redhat.com/show_bug.cgi?id=1702693

bugzilla.redhat.com/show_bug.cgi?id=1703136

bugzilla.redhat.com/show_bug.cgi?id=1703558

bugzilla.redhat.com/show_bug.cgi?id=1703749

bugzilla.redhat.com/show_bug.cgi?id=1703904

bugzilla.redhat.com/show_bug.cgi?id=1703947

bugzilla.redhat.com/show_bug.cgi?id=1705243

bugzilla.redhat.com/show_bug.cgi?id=1707448

bugzilla.redhat.com/show_bug.cgi?id=1707524

bugzilla.redhat.com/show_bug.cgi?id=1707799

bugzilla.redhat.com/show_bug.cgi?id=1708187

bugzilla.redhat.com/show_bug.cgi?id=1708442

bugzilla.redhat.com/show_bug.cgi?id=1708552

bugzilla.redhat.com/show_bug.cgi?id=1709254

bugzilla.redhat.com/show_bug.cgi?id=1709626

bugzilla.redhat.com/show_bug.cgi?id=1710424

bugzilla.redhat.com/show_bug.cgi?id=1710723

bugzilla.redhat.com/show_bug.cgi?id=1712488

bugzilla.redhat.com/show_bug.cgi?id=1713211

bugzilla.redhat.com/show_bug.cgi?id=1717028

bugzilla.redhat.com/show_bug.cgi?id=1718458

bugzilla.redhat.com/show_bug.cgi?id=1718542

bugzilla.redhat.com/show_bug.cgi?id=1720466

bugzilla.redhat.com/show_bug.cgi?id=1720581

jenkins.io/security/advisory/2019-05-31/#SECURITY-921

0.003 Low

EPSS

Percentile

66.3%

JSON

Related for VERACODE:20661