CVE-2019-10400: Medium severity jenkins script security vulnerability
Published Sep 12, 2019
·Updated
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts.
Affected Software
2 affected componentsFixes available
maven/org.jenkins-ci.plugins:script-security<=1.62
1.63
Jenkins Script Security Jenkins<=1.62
Event History
Sep 12, 2019
CVE Published
via MITRE·01:55 PM
Data Sourced
via MITRE·01:55 PM
Description
May 24, 2022
Advisory Published
04:55 PM
Frequently Asked Questions
1
What is the severity of CVE-2019-10400?
CVE-2019-10400 is classified as high severity due to its potential for arbitrary code execution.
2
How do I fix CVE-2019-10400?
To fix CVE-2019-10400, upgrade the Jenkins Script Security Plugin to version 1.63 or later.
3
What versions of Jenkins are affected by CVE-2019-10400?
Jenkins Script Security Plugin versions 1.62 and earlier are affected by CVE-2019-10400.
4
What type of vulnerability is CVE-2019-10400?
CVE-2019-10400 is a sandbox bypass vulnerability in the Jenkins Script Security Plugin.
5
Can CVE-2019-10400 allow attackers to access sensitive data?
Yes, CVE-2019-10400 can allow attackers to execute arbitrary code, potentially accessing sensitive data.