CVE-2019-1003034: Critical severity jenkins job dsl vulnerability
A sandbox bypass vulnerability exists in Jenkins Job DSL Plugin 1.71 and earlier in job-dsl-core/src/main/groovy/javaposse/jobdsl/dsl/AbstractDslScriptLoader.groovy, job-dsl-plugin/build.gradle, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/JobDslWhitelist.groovy, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/SandboxDslScriptLoader.groovy that allows attackers with control over Job DSL definitions to execute arbitrary code on the Jenkins master JVM.
Other sources
The Jenkins Job DSL Plugin supports sandboxed Groovy expressions for Job DSL definitions. Its sandbox protection could be circumvented during parsing, compilation, and script instantiation by providing a crafted Groovy script.
This allowed users able to control the Job DSL scripts to bypass the sandbox protection and execute arbitrary code on the Jenkins master.
Job DSL Plugin now uses Script Security APIs that apply sandbox protection during these phases.
External Reference:
https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1342
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1003034?
CVE-2019-1003034 is classified as a medium severity vulnerability.
How do I fix CVE-2019-1003034?
To fix CVE-2019-1003034, upgrade Jenkins Job DSL Plugin to version 1.72 or later.
What systems are affected by CVE-2019-1003034?
CVE-2019-1003034 affects Jenkins Job DSL Plugin versions 1.71 and earlier.
What type of vulnerability is CVE-2019-1003034?
CVE-2019-1003034 is a sandbox bypass vulnerability that allows unauthorized access.
Is there a known exploit for CVE-2019-1003034?
While specific exploits for CVE-2019-1003034 are not publicly detailed, the vulnerability poses a risk for systems using affected versions.