Lucene search
GoogleOSV:CVE-2019-1003002HistoryJan 22, 2019 - 2:29 p.m.
CVE-2019-1003002
2019-01-2214:29:00
Google
osv.dev
6
A sandbox bypass vulnerability exists in Pipeline: Declarative Plugin 1.3.3 and earlier in pipeline-model-definition/src/main/groovy/org/jenkinsci/plugins/pipeline/modeldefinition/parser/Converter.groovy that allows attackers with Overall/Read permission to provide a pipeline script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.
References
packetstormsecurity.com/files/152132/Jenkins-ACL-Bypass-Metaprogramming-Remote-Code-Execution.html
www.rapid7.com/db/modules/exploit/multi/http/jenkins_metaprogramming
access.redhat.com/errata/RHBA-2019:0326
access.redhat.com/errata/RHBA-2019:0327
jenkins.io/security/advisory/2019-01-08/#SECURITY-1266
www.exploit-db.com/exploits/46572/
Related
prion
prion
Security feature bypass
2019-01-22 14:29:00
osv
osv
Jenkins Pipeline Declarative Plugin sandbox bypass vulnerability
2022-05-13 01:15:20
nvd
nvd
CVE-2019-1003002
2019-01-22 14:29:00
veracode
veracode
Sandbox Restrictions Bypass
2019-05-16 03:24:09
cvelist
cvelist
CVE-2019-1003002
2019-01-22 14:00:00
cve
cve
CVE-2019-1003002
2019-01-22 14:29:00
redhatcve
redhatcve
CVE-2019-1003002
2019-10-10 03:52:25
github
github
Jenkins Pipeline Declarative Plugin sandbox bypass vulnerability
2022-05-13 01:15:20
nessus
nessus
Jenkins Security Advisory 2019-01-08 Multiple Vulnerabilities
2019-09-24 00:00:00
packetstorm
packetstorm
Jenkins ACL Bypass / Metaprogramming Remote Code Execution
2019-03-19 00:00:00