Remote Code Execution (RCE)

2020-06-1903:53:37

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

42.8%

JSON

jenkins-script-security-plugin is vulnerable to remote code execution. It is possible because of sandbox protection bypass.

CPENameOperatorVersion
jenkins-2-pluginseq3.11.1597310986__1.el7
jenkins-2-pluginseq4.4.1583444859__1.el7
jenkins-2-pluginseq3.11.1535566135__1.el7
jenkins-2-pluginseq3.11.1560870549__1.el7
jenkins-2-pluginseq3.10.1525788236__1.el7
jenkins-2-pluginseq4.2.1574873592__1.el7
jenkins-2-pluginseq3.11.1539805268__1.el7
jenkins-2-pluginseq3.9.1519779801__1.el7
jenkins-2-pluginseq4.3.1583445947__1.el7
jenkins-2-pluginseq3.11.1579107288__1.el7

Name	Operator	Version
jenkins-2-plugins	eq	3.11.1597310986__1.el7
jenkins-2-plugins	eq	4.4.1583444859__1.el7
jenkins-2-plugins	eq	3.11.1535566135__1.el7
jenkins-2-plugins	eq	3.11.1560870549__1.el7
jenkins-2-plugins	eq	3.10.1525788236__1.el7
jenkins-2-plugins	eq	4.2.1574873592__1.el7
jenkins-2-plugins	eq	3.11.1539805268__1.el7
jenkins-2-plugins	eq	3.9.1519779801__1.el7
jenkins-2-plugins	eq	4.3.1583445947__1.el7
jenkins-2-plugins	eq	3.11.1579107288__1.el7