CVE-2019-1003001
mediumPriorität · beachten · 75EPSS 0.861 · 100. PerzentilExploit · waffenfähigEUUSEPSS · bewertet 2026-10-27
A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.61 and earlier in src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowDefinition.java, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShellFactory.java that allows attackers with Overall/Read permission to provide a pipeline script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.5–8.8
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
Exploits (3)
Öffentlicher Proof-of-Concept- und Exploit-Code.
- exploit/multi/http/jenkins_metaprogrammingJenkins ACL Bypass and Metaprogramming RCEwaffenfähig · metasploit
betroffene Produkte (6)
Betroffene Produkte und Versionsbereiche.
- redhat openshift container platform= 3.11nvdUScpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*
- Maven org.jenkins-ci.plugins.workflow:workflow-cps-parent< 2.61.1osvUSpkg:maven/org.jenkins-ci.plugins.workflow/workflow-cps-parent
- Maven org.jenkins-ci.plugins:pipeline-model-definition< 1.3.4.1osvUSpkg:maven/org.jenkins-ci.plugins/pipeline-model-definition
- Maven org.jenkins-ci.plugins:script-security< 1.50osvUSpkg:maven/org.jenkins-ci.plugins/script-security
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- GHSA-6q78-6xvr-26fgJenkins Groovy Plugin sandbox bypass vulnerability2022-05-13ghsa · osvUS
Jenkins Script Security sandbox protection could be circumvented during the script compilation phase by applying AST transforming annotations such as `@Grab` to source code elements. Both the pipeline validation REST APIs and actual script/pipeline execution are affected. This allowed users with Overall/Read permission, or able to control Jenkinsfile or sandboxed Pipeline shared library contents in SCM, to bypass the sandbox protection and execute arbitrary code on the Jenkins controller. All known unsafe AST transformations in Groovy are now prohibited in sandboxed scripts.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (20)
Externe Belege — Patches, Meldungen, Analysen.
- http://packetstormsecurity.com/files/152132/Jenkins-ACL-Bypass-Metaprogramming-Remote-Code-Execution.htmlcnnvd
- http://www.rapid7.com/db/modules/exploit/multi/cnnvd
- https://access.redhat.com/errata/RHBA-2019:0326cnnvd
- https://access.redhat.com/errata/RHBA-2019:0327cnnvd
- https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266cnnvd
- https://packetstormsecurity.com/files/152132/Jenkins-ACL-Bypass-Metaprogramming-Remote-Code-Execution.htmlcnnvd
- https://www.exploit-db.com/exploits/46572cnnvd
- https://www.exploit-db.com/exploits/46572/cnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan