Lucene search
GoogleOSV:GHSA-P4P5-3V2J-W5RVHistoryMay 13, 2022 - 1:48 a.m.
Improper Privilege Management in Jenkins
2022-05-1301:48:40
Google
osv.dev
10
jenkins
privilege management
sandbox bypass
script security plugin
arbitrary code execution
groovy sandbox.
EPSS
0.003
Percentile
71.2%
A sandbox bypass vulnerability exists in Script Security Plugin 1.47 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM, if plugins using the Groovy sandbox are installed.
Related
osv
osv
CVE-2018-1000865
2018-12-10 14:29:01
nvd
nvd
CVE-2018-1000865
2018-12-10 14:29:01
cvelist
cvelist
CVE-2018-1000865
2018-12-10 14:00:00
prion
prion
Security feature bypass
2018-12-10 14:29:00
veracode
veracode
Sandbox Restrictions Bypass
2019-05-16 03:24:00
github
github
Improper Privilege Management in Jenkins
2022-05-13 01:48:40
cve
cve
CVE-2018-1000865
2018-12-10 14:29:01
redhatcve
redhatcve
CVE-2018-1000866
2020-04-08 20:50:40
CVE-2018-1000865
2019-10-23 18:34:18