A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.61 and earlier in src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowDefinition.java, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShellFactory.java that allows attackers with Overall/Read permission to provide a pipeline script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade haproxyUpgrade jenkins-2-pluginsUpgrade golang-github-prometheus-alertmanagerUpgrade atomic-openshift-node-problem-detectorUpgrade jenkinsUpgrade openshift-enterprise-cluster-capacityUpgrade golang-github-prometheus-prometheusUpgrade atomic-openshift-metrics-serverUpgrade atomic-openshiftUpgrade openshift-ansibleUpgrade atomic-openshift-cluster-autoscalerUpgrade atomic-openshift-web-consoleUpgrade golang-github-openshift-oauth-proxyUpgrade atomic-openshift-deschedulerUpgrade openshift-enterprise-autohealUpgrade atomic-openshift-dockerregistryUpgrade atomic-openshift-service-idlerUpgrade golang-github-prometheus-node_exporterUpgrade atomic-enterprise-service-catalog | Mar 15, 2019 | Jan 8, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub