A sandbox bypass vulnerability exists in Pipeline: Declarative Plugin 1.3.3 and earlier in pipeline-model-definition/src/main/groovy/org/jenkinsci/plugins/pipeline/modeldefinition/parser/Converter.groovy that allows attackers with Overall/Read permission to provide a pipeline script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade golang-github-prometheus-alertmanagerUpgrade golang-github-prometheus-node_exporterUpgrade atomic-openshift-web-consoleUpgrade golang-github-openshift-oauth-proxyUpgrade openshift-enterprise-autohealUpgrade jenkinsUpgrade golang-github-prometheus-prometheusUpgrade atomic-openshift-node-problem-detectorUpgrade atomic-openshiftUpgrade atomic-openshift-service-idlerUpgrade openshift-ansibleUpgrade openshift-enterprise-cluster-capacityUpgrade atomic-openshift-metrics-serverUpgrade atomic-openshift-deschedulerUpgrade atomic-enterprise-service-catalogUpgrade atomic-openshift-cluster-autoscalerUpgrade haproxyUpgrade jenkins-2-pluginsUpgrade atomic-openshift-dockerregistry | Mar 15, 2019 | Jan 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub