CVE-2019-10356
published 2019-07-31CVE-2019-10356: A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of method pointer expressions allowed attackers to…
PriorityP353high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
2.50%
82.9th percentile
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of method pointer expressions allowed attackers to execute arbitrary code in sandboxed scripts.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jenkins | amazon_ec2_plugin | — | — |
| jenkins | between_configuration_as_code_plugin | — | — |
| jenkins | configuration_as_code_plugin | — | — |
| jenkins | deprecated_groovy_libraries_plugin | — | — |
| jenkins | google_kubernetes_engine_plugin | — | — |
| jenkins | maven_integration_plugin | — | — |
| jenkins | maven_release_plug-in_plugin | — | — |
| jenkins | sandbox_protection_in_script_security_plugin | — | — |
| jenkins | script_security | <= 1.61 | — |
| jenkins | script_security_plugin | — | — |
| jenkins | since_configuration_as_code_plugin | — | — |
| jenkins | skytap_cloud_ci_plugin | — | — |
| jenkins_project | jenkins_script_security_plugin | — | — |
| redhat | openshift_container_platform | — | — |
| redhat | openshift_container_platform | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
vendor_redhat8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
jenkins-plugin-script-security: Sandbox bypass through method pointer expressions in Script Security Plugin
vendor_redhat·2019-08-01·CVSS 8.8
CVE-2019-10356 [HIGH] CWE-20 jenkins-plugin-script-security: Sandbox bypass through method pointer expressions in Script Security Plugin
jenkins-plugin-script-security: Sandbox bypass through method pointer expressions in Script Security Plugin
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of method pointer expressions allowed attackers to execute arbitrary code in sandboxed scripts.
A flaw was found in the Jenkins Script Security plugin. Sandbox protection could be circumvented through crafted subexpressions used as arguments to method pointer expressions. This allows attackers the ability to specify sandboxed scripts to execute arbitrary code in the context of the Jenkins master JVM. The highest threats from this vulnerability are to data confidentiality and integrity as well as system availability.
Package: jenkins-script-security-plugin (Red Hat OpenShift Co
Jenkins
Jenkins Security Advisory 2019-07-31
vendor_jenkins·2019-07-31·CVSS 8.8
CVE-2019-10343 [HIGH] Jenkins Security Advisory 2019-07-31
Title: Jenkins Security Advisory 2019-07-31
Jenkins Security Advisory 2019-07-31
Jenkins Security Home
For Administrators
Overview
Terminology
Vulnerabilities and Scoring
Security Advisories
Security Issues
Advisory Schedule
Vulnerabilities in Plugins
How We Fix Security Issues
For Reporters
Reporting Vulnerabilities
Jenkins CNA
For Maintainers
Overview
Vulnerabilities in Plugins
Jenkins Security Team
About
Contributions
This advisory announces vulnerabilities in the following Jenkins deliverables:
Amazon EC2
Plugin
Configuration as Code
Plugin
Google Kubernetes Engine
Plugin
Maven Integration
Plugin
Maven Release Plug-in
Plugin
Pipeline: Deprecated Groovy Librari
GHSA
Return of Pointer Value Outside of Expected Rang in Jenkins Script Security Plugin
ghsa·2022-05-24
CVE-2019-10356 [HIGH] CWE-466 Return of Pointer Value Outside of Expected Rang in Jenkins Script Security Plugin
Return of Pointer Value Outside of Expected Rang in Jenkins Script Security Plugin
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of method pointer expressions allowed attackers to execute arbitrary code in sandboxed scripts.
OSV
Return of Pointer Value Outside of Expected Rang in Jenkins Script Security Plugin
osv·2022-05-24
CVE-2019-10356 [HIGH] Return of Pointer Value Outside of Expected Rang in Jenkins Script Security Plugin
Return of Pointer Value Outside of Expected Rang in Jenkins Script Security Plugin
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of method pointer expressions allowed attackers to execute arbitrary code in sandboxed scripts.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2019-10356 jenkins-plugin-script-security: Sandbox bypass through method pointer expressions in Script Security Plugin
bugzilla·2019-08-01·CVSS 8.8
CVE-2019-10356 [HIGH] CVE-2019-10356 jenkins-plugin-script-security: Sandbox bypass through method pointer expressions in Script Security Plugin
CVE-2019-10356 jenkins-plugin-script-security: Sandbox bypass through method pointer expressions in Script Security Plugin
Sandbox protection in Jenkins Script Security Plugin could be circumvented through crafted subexpressions used as arguments to method pointer expressions. This allowed attackers able to specify sandboxed scripts to execute arbitrary code in the context of the Jenkins master JVM.
Method pointer subexpressions are now subject to sandbox protection.
External References:
https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1465%20(2)
Discussion:
Created jenkins-script-security-plugin tracking bugs for this issue:
Affects: fedora-all [bug 1735519]
---
"Any security advisory related updates to Jenkins core or the plugins we include in the OpenShift Jenkins mas
Bugzilla
CVE-2019-10356 jenkins-script-security-plugin: jenkins-plugin-script-security: Sandbox bypass through method pointer expressions in Script Security Plugin [fedora-all]
bugzilla·2019-08-01·CVSS 8.8
CVE-2019-10356 [HIGH] CVE-2019-10356 jenkins-script-security-plugin: jenkins-plugin-script-security: Sandbox bypass through method pointer expressions in Script Security Plugin [fedora-all]
CVE-2019-10356 jenkins-script-security-plugin: jenkins-plugin-script-security: Sandbox bypass through method pointer expressions in Script Security Plugin [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM chan
http://www.openwall.com/lists/oss-security/2019/07/31/1https://access.redhat.com/errata/RHSA-2019:2594https://access.redhat.com/errata/RHSA-2019:2651https://access.redhat.com/errata/RHSA-2019:2662https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1465%20%282%29http://www.openwall.com/lists/oss-security/2019/07/31/1https://access.redhat.com/errata/RHSA-2019:2594https://access.redhat.com/errata/RHSA-2019:2651https://access.redhat.com/errata/RHSA-2019:2662https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1465%20%282%29
2019-07-31
Published