CVE-2017-1000095 — Incorrect Permission Assignment in Jenkins Script Security

CWE-732 — Incorrect Permission AssignmentCWE-184 — Incomplete List of Disallowed Inputs8 documents7 sources
Severity
6.5MEDIUMNVD
EPSS
0.1%
top 79.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Jenkins Script Security
Timeline
PublishedOct 5
Latest updateMay 13

Description

The default whitelist included the following unsafe entries: DefaultGroovyMethods.putAt(Object, String, Object); DefaultGroovyMethods.getAt(Object, String). These allowed circumventing many of the access restrictions implemented in the script sandbox by using e.g. currentBuild['rawBuild'] rather than currentBuild.rawBuild. Additionally, the following entries allowed accessing private data that would not be accessible otherwise due to script security: groovy.json.JsonOutput.toJson(Closure); groov…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

3
GHSA
Unsafe methods in the default list of approved signatures in Jenkins Script Security Plugin↗2022-05-13
▶
OSV
Unsafe methods in the default list of approved signatures in Jenkins Script Security Plugin↗2022-05-13
▶
CVEList
CVE-2017-1000095: The default whitelist included the following unsafe entries: DefaultGroovyMethods↗2017-10-04
▶

📋Vendor Advisories

2
Red Hat
jenkins-plugin-script-security: Unsafe methods in the default whitelist (SECURITY-538)↗2017-07-10
▶
Jenkins
Jenkins Security Advisory 2017-07-10↗2017-07-10
▶

💬Community

2
Bugzilla
CVE-2017-1000095 jenkins-plugin-script-security: Unsafe methods in the default whitelist (SECURITY-538)↗2017-07-14
▶
Bugzilla
CVE-2017-1000095 jenkins-script-security-plugin: jenkins-plugin-script-security: Unsafe methods in the default whitelist (SECURITY-538) [fedora-all]↗2017-07-14
▶
CVE-2017-1000095 — Incorrect Permission Assignment | cvebase