CVE-2019-1003000
First published: Tue Jan 22 2019(Updated: )
A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java that allows attackers with the ability to provide sandboxed scripts to execute arbitrary code on the Jenkins master JVM.
Credit: jenkinsci-cert@googlegroups.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Jenkins Script Security | <=1.49 | |
| redhat openshift container platform | =3.11 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/152132/Jenkins-ACL-Bypass-Metaprogramming-Remote-Code-Execution.html
- http://www.rapid7.com/db/modules/exploit/multi/http/jenkins_metaprogramming
- https://access.redhat.com/errata/RHBA-2019:0326
- https://access.redhat.com/errata/RHBA-2019:0327
- https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266
- https://www.exploit-db.com/exploits/46453/
- https://www.exploit-db.com/exploits/46572/
Frequently Asked Questions
What is the severity of CVE-2019-1003000?
CVE-2019-1003000 is classified as a critical vulnerability due to its potential to allow arbitrary code execution on the Jenkins master JVM.
How do I fix CVE-2019-1003000?
To mitigate CVE-2019-1003000, upgrade the Jenkins Script Security Plugin to version 1.50 or later.
Who is affected by CVE-2019-1003000?
CVE-2019-1003000 affects users of Jenkins Script Security Plugin versions 1.49 and earlier and Red Hat OpenShift Container Platform version 3.11.
What type of attack does CVE-2019-1003000 allow?
CVE-2019-1003000 allows attackers to bypass the sandbox restrictions and execute arbitrary scripts on the Jenkins master instance.
How was CVE-2019-1003000 discovered?
CVE-2019-1003000 was identified through security assessments highlighting the misconfiguration in the GroovySandbox class.
- agent/author
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/first-publish-date
- agent/event
- agent/description
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/jenkins
- canonical/jenkins script security
- version/jenkins script security/1.49
- vendor/redhat
- canonical/redhat openshift container platform
- version/redhat openshift container platform/3.11