CVE-2019-16538
First published: Thu Nov 21 2019(Updated: )
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.67 and earlier related to the handling of default parameter expressions in closures allowed attackers to execute arbitrary code in sandboxed scripts.
Credit: jenkinsci-cert@googlegroups.com jenkinsci-cert@googlegroups.com jenkinsci-cert@googlegroups.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Jenkins Script Security | <=1.67 | |
| maven/org.jenkins-ci.plugins:script-security | <=1.67 | 1.68 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openwall.com/lists/oss-security/2019/11/21/1
- https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1658
- https://nvd.nist.gov/vuln/detail/CVE-2019-16538
- https://github.com/jenkinsci/script-security-plugin/commit/0e7da14171ed1d03ff72f6910392e630b40a8590
- https://github.com/advisories/GHSA-62pm-mgrh-7p69 (Advisory)
Frequently Asked Questions
What is the severity of CVE-2019-16538?
CVE-2019-16538 is classified as a high-severity vulnerability due to its ability to allow execution of arbitrary code in sandboxed scripts.
How do I fix CVE-2019-16538?
To fix CVE-2019-16538, upgrade the Jenkins Script Security Plugin to version 1.68 or later.
What type of vulnerability is CVE-2019-16538?
CVE-2019-16538 is a sandbox bypass vulnerability that affects the handling of default parameter expressions in closures.
Which versions of Jenkins are affected by CVE-2019-16538?
All versions of Jenkins Script Security Plugin prior to 1.68 are affected by CVE-2019-16538.
Can CVE-2019-16538 be exploited remotely?
Yes, CVE-2019-16538 can be exploited remotely by attackers with access to sandboxed scripts.
- collector/github-advisory-latest
- alias/GHSA-62pm-mgrh-7p69
- alias/CVE-2019-16538
- collector/github-advisory
- agent/type
- agent/softwarecombine
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/severity
- agent/last-modified-date
- agent/description
- agent/event
- agent/first-publish-date
- agent/trending
- agent/source
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-cve
- collector/nvd-index
- package-manager/maven
- vendor/jenkins
- canonical/jenkins script security
- version/jenkins script security/1.67