CVE-2019-1003000

CVE Database · CVE-2019-1003000

CVE-2019-1003000

· HIGHModified

CVSS v3.1

8.8

EPSS

98.43%

Published

Jan 22, 2019

Modified

Nov 21, 2024

Public PoC / Exploit (5)

All weaponized →

Exploit-DBJenkins 2.137 and Pipeline Groovy Plugin 2.61 - ACL Bypass and Metaprogramming Remote Code Execution (Metasploit)Exploit-DBJenkins Plugin Script Security 1.49/Declarative 1.3.4/Groovy 2.60 - Remote Code Execution Exploit-DBJenkins Plugin Script Security < 1.50/Declarative < 1.3.4.1/Groovy < 2.61.1 - Remote Code Execution (PoC)NucleiNuclei detection template TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java that allows attackers with the ability to provide sandboxed scripts to execute arbitrary code on the Jenkins master JVM.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products (2)

jenkins · script_securityvulnerable

redhat · openshift_container_platformvulnerable

References (14)

http://packetstormsecurity.com/files/152132/Jenkins-ACL-Bypass-Metaprogramming-Remote-Code-Execution.html

ExploitThird Party AdvisoryVDB Entry

http://www.rapid7.com/db/modules/exploit/multi/http/jenkins_metaprogramming

Third Party Advisory

https://access.redhat.com/errata/RHBA-2019:0326

Third Party Advisory