vulnerability

Red Hat OpenShift: CVE-2022-43406: jenkins-plugin/workflow-cps-global-lib: Sandbox bypass vulnerability in Pipeline: Deprecated Groovy Libraries Plugin

Name: Red Hat OpenShift: CVE-2022-43406: jenkins-plugin/workflow-cps-global-lib: Sandbox bypass vulnerability in Pipeline: Deprecated Groovy Libraries Plugin
Creator: Red Hat
Published: 2022-10-19T00:00:00.000Z
Keywords: CVE, Red Hat OpenShift, 2022, 43406, jenkins, linuxrpm-upgrade-jenkins-2-plugins, Severity 9

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:S/C:C/I:C/A:C)

Published

Oct 19, 2022

Added

Feb 9, 2023

Modified

Jun 17, 2026

Description

A sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b_454e43966 and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

Solution

linuxrpm-upgrade-jenkins-2-plugins

References

CVE-2022-43406
https://attackerkb.com/topics/CVE-2022-43406
EUVD-EUVD-2022-7049
REDHAT-RHSA-2023:0560
REDHAT-RHSA-2023:0777
REDHAT-RHSA-2023:1064
REDHAT-RHSA-2023:3198
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-7049

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report