Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-10391 State: PUBLISHED Published: 2019-08-28T15:30:17 Last Updated: 2024-08-04T22:17:20.569Z Vendors: Jenkins project Products: Jenkins IBM Application Security on Cloud Plugin Description: Jenkins IBM Application Security on Cloud Plugin 1.2.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/08/28/4 - https://jenkins.io/security/advisory/2019-08-28/#SECURITY-1512
CVE ID: CVE-2019-10392 State: PUBLISHED Published: 2019-09-12T13:55:15 Last Updated: 2024-08-04T22:17:20.645Z Vendors: Jenkins project Products: Jenkins Git Client Plugin Description: Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1534 - http://www.openwall.com/lists/oss-security/2019/09/12/2
CVE ID: CVE-2019-10393 State: PUBLISHED Published: 2019-09-12T13:55:15 Last Updated: 2024-08-04T22:17:20.653Z Vendors: Jenkins project Products: Jenkins Script Security Plugin Description: A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/09/12/2 - https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1538
CVE ID: CVE-2019-10394 State: PUBLISHED Published: 2019-09-12T13:55:15 Last Updated: 2024-08-04T22:17:20.567Z Vendors: Jenkins project Products: Jenkins Script Security Plugin Description: A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property names in property expressions on the left-hand side of assignment expressions allowed attackers to execute arbitrary code in sandboxed scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/09/12/2 - https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1538
CVE ID: CVE-2019-10395 State: PUBLISHED Published: 2019-09-12T13:55:15 Last Updated: 2024-08-04T22:17:20.568Z Vendors: Jenkins project Products: Jenkins Build Environment Plugin Description: Jenkins Build Environment Plugin 1.6 and earlier did not escape variables shown on its views, resulting in a cross-site scripting vulnerability in Jenkins 2.145, 2.138.1, or older, exploitable by users able to change various job/build properties. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/09/12/2 - https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1476
CVE ID: CVE-2019-10396 State: PUBLISHED Published: 2019-09-12T13:55:15 Last Updated: 2024-08-04T22:17:20.506Z Vendors: Jenkins project Products: Jenkins Dashboard View Plugin Description: Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting vulnerability exploitable by users able to change build descriptions. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/09/12/2 - https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1489
CVE ID: CVE-2019-10397 State: PUBLISHED Published: 2019-09-12T13:55:15 Last Updated: 2024-08-04T22:17:20.574Z Vendors: Jenkins project Products: Jenkins Aqua Security Serverless Scanner Plugin Description: Jenkins Aqua Security Serverless Scanner Plugin 1.0.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/09/12/2 - https://jenkins.io/security/advisory/2019-09-12/#SECURTY-1509
CVE ID: CVE-2019-10398 State: PUBLISHED Published: 2019-09-12T13:55:15 Last Updated: 2024-08-04T22:17:20.579Z Vendors: Jenkins project Products: Jenkins Beaker Builder Plugin Description: Jenkins Beaker Builder Plugin 1.9 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/09/12/2 - https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1545
CVE ID: CVE-2019-10399 State: PUBLISHED Published: 2019-09-12T13:55:15 Last Updated: 2024-08-04T22:24:16.948Z Vendors: Jenkins project Products: Jenkins Script Security Plugin Description: A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property names in property expressions in increment and decrement expressions allowed attackers to execute arbitrary code in sandboxed scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/09/12/2 - https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1538
CVE ID: CVE-2019-10400 State: PUBLISHED Published: 2019-09-12T13:55:15 Last Updated: 2024-08-04T22:24:17.837Z Vendors: Jenkins project Products: Jenkins Script Security Plugin Description: A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/09/12/2 - https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1538
CVE ID: CVE-2019-10401 State: PUBLISHED Published: 2019-09-25T15:05:32 Last Updated: 2024-08-04T22:24:16.959Z Vendors: Jenkins project Products: Jenkins Description: In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:expandableTextBox form control interpreted its content as HTML when expanded, resulting in a stored XSS vulnerability exploitable by users with permission to define its contents (typically Job/Configure). Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1498 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10402 State: PUBLISHED Published: 2019-09-25T15:05:32 Last Updated: 2024-08-04T22:24:16.945Z Vendors: Jenkins project Products: Jenkins Description: In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:combobox form control interpreted its item labels as HTML, resulting in a stored XSS vulnerability exploitable by users with permission to define its contents. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1525 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10403 State: PUBLISHED Published: 2019-09-25T15:05:32 Last Updated: 2024-08-04T22:24:17.504Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the SCM tag name on the tooltip for SCM tag actions, resulting in a stored XSS vulnerability exploitable by users able to control SCM tag names for these actions. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1537%20%281%29 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10404 State: PUBLISHED Published: 2019-09-25T15:05:32 Last Updated: 2024-08-04T22:24:16.950Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the reason why a queue items is blcoked in tooltips, resulting in a stored XSS vulnerability exploitable by users able to control parts of the reason a queue item is blocked, such as label expressions not matching any idle executors. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1537%20%282%29 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10405 State: PUBLISHED Published: 2019-09-25T15:05:32 Last Updated: 2024-08-04T22:24:16.961Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.196 and earlier, LTS 2.176.3 and earlier printed the value of the "Cookie" HTTP request header on the /whoAmI/ URL, allowing attackers exploiting another XSS vulnerability to obtain the HTTP session cookie despite it being marked HttpOnly. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1505 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10406 State: PUBLISHED Published: 2019-09-25T15:05:32 Last Updated: 2024-08-04T22:24:16.966Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not restrict or filter values set as Jenkins URL in the global configuration, resulting in a stored XSS vulnerability exploitable by attackers with Overall/Administer permission. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1471 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10407 State: PUBLISHED Published: 2019-09-25T15:05:32 Last Updated: 2024-08-04T22:24:17.569Z Vendors: Jenkins project Products: Jenkins Project Inheritance Plugin Description: Jenkins Project Inheritance Plugin 2.0.0 and earlier displayed a list of environment variables passed to a build without masking sensitive variables contributed by the Mask Passwords Plugin. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-351 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10408 State: PUBLISHED Published: 2019-09-25T15:05:32 Last Updated: 2024-08-04T22:24:16.960Z Vendors: Jenkins project Products: Jenkins Project Inheritance Plugin Description: A cross-site request forgery vulnerability in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers to trigger project generation from templates. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-401 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10409 State: PUBLISHED Published: 2019-09-25T15:05:32 Last Updated: 2024-08-04T22:24:17.762Z Vendors: Jenkins project Products: Jenkins Project Inheritance Plugin Description: A missing permission check in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers with Overall/Read permission to trigger project generation from templates. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-401 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10410 State: PUBLISHED Published: 2019-09-25T15:05:32 Last Updated: 2024-08-04T22:24:16.967Z Vendors: Jenkins project Products: Jenkins Log Parser Plugin Description: Jenkins Log Parser Plugin 2.0 and earlier did not escape an error message, resulting in a cross-site scripting vulnerability exploitable by users able to define log parsing rules. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-732 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10411 State: PUBLISHED Published: 2019-09-25T15:05:32 Last Updated: 2024-08-04T22:24:17.525Z Vendors: Jenkins project Products: Jenkins Inedo BuildMaster Plugin Description: Jenkins Inedo BuildMaster Plugin 2.4.0 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1513 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10412 State: PUBLISHED Published: 2019-09-25T15:05:33 Last Updated: 2024-08-04T22:24:17.505Z Vendors: Jenkins project Products: Jenkins Inedo ProGet Plugin Description: Jenkins Inedo ProGet Plugin 1.2 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1514 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10413 State: PUBLISHED Published: 2019-09-25T15:05:33 Last Updated: 2024-08-04T22:24:17.504Z Vendors: Jenkins project Products: Jenkins Data Theorem: CI/CD Plugin Description: Jenkins Data Theorem: CI/CD Plugin 1.3 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1557 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10414 State: PUBLISHED Published: 2019-09-25T15:05:33 Last Updated: 2024-08-04T22:24:17.473Z Vendors: Jenkins project Products: Jenkins Git Changelog Plugin Description: Jenkins Git Changelog Plugin 2.17 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1574 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10415 State: PUBLISHED Published: 2019-09-25T15:05:33 Last Updated: 2024-08-04T22:24:17.483Z Vendors: Jenkins project Products: Jenkins Violation Comments to GitLab Plugin Description: Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1577 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10416 State: PUBLISHED Published: 2019-09-25T15:05:33 Last Updated: 2024-08-04T22:24:17.499Z Vendors: Jenkins project Products: Jenkins Violation Comments to GitLab Plugin Description: Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1577 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10417 State: PUBLISHED Published: 2019-09-25T15:05:33 Last Updated: 2024-08-04T22:24:17.640Z Vendors: Jenkins project Products: Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin Description: Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-920%20%281%29 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10418 State: PUBLISHED Published: 2019-09-25T15:05:33 Last Updated: 2024-08-04T22:24:17.534Z Vendors: Jenkins project Products: Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin Description: Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-920%20%282%29 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10419 State: PUBLISHED Published: 2019-09-25T15:05:33 Last Updated: 2024-08-04T22:24:17.856Z Vendors: Jenkins project Products: Jenkins vFabric Application Director Plugin Description: Jenkins vFabric Application Director Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURTIY-1541 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10420 State: PUBLISHED Published: 2019-09-25T15:05:33 Last Updated: 2024-08-04T22:24:17.518Z Vendors: Jenkins project Products: Jenkins Assembla Plugin Description: Jenkins Assembla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1543 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10421 State: PUBLISHED Published: 2019-09-25T15:05:33 Last Updated: 2024-08-04T22:24:17.478Z Vendors: Jenkins project Products: Jenkins Azure Event Grid Build Notifier Plugin Description: Jenkins Azure Event Grid Build Notifier Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1544 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10422 State: PUBLISHED Published: 2019-09-25T15:05:33 Last Updated: 2024-08-04T22:24:17.489Z Vendors: Jenkins project Products: Jenkins Call Remote Job Plugin Description: Jenkins Call Remote Job Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1548 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10423 State: PUBLISHED Published: 2019-09-25T15:05:33 Last Updated: 2024-08-04T22:24:17.986Z Vendors: Jenkins project Products: Jenkins CodeScan Plugin Description: Jenkins CodeScan Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1551 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10424 State: PUBLISHED Published: 2019-09-25T15:05:34 Last Updated: 2024-08-04T22:24:17.937Z Vendors: Jenkins project Products: Jenkins elOyente Plugin Description: Jenkins elOyente Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1561 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10425 State: PUBLISHED Published: 2019-09-25T15:05:34 Last Updated: 2024-08-04T22:24:18.039Z Vendors: Jenkins project Products: Jenkins Google Calendar Plugin Description: Jenkins Google Calendar Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1572 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10426 State: PUBLISHED Published: 2019-09-25T15:05:34 Last Updated: 2024-08-04T22:24:17.537Z Vendors: Jenkins project Products: Jenkins Gem Publisher Plugin Description: Jenkins Gem Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1573 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10427 State: PUBLISHED Published: 2019-09-25T15:05:34 Last Updated: 2024-08-04T22:24:18.183Z Vendors: Jenkins project Products: Jenkins Aqua MicroScanner Plugin Description: Jenkins Aqua MicroScanner Plugin 1.0.7 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1507 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10428 State: PUBLISHED Published: 2019-09-25T15:05:34 Last Updated: 2024-08-04T22:24:17.467Z Vendors: Jenkins project Products: Jenkins Aqua Security Scanner Plugin Description: Jenkins Aqua Security Scanner Plugin 3.0.17 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1508 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10429 State: PUBLISHED Published: 2019-09-25T15:05:34 Last Updated: 2024-08-04T22:24:17.929Z Vendors: Jenkins project Products: Jenkins GitLab Logo Plugin Description: Jenkins GitLab Logo Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1575 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10430 State: PUBLISHED Published: 2019-09-25T15:05:34 Last Updated: 2024-08-04T22:24:18.177Z Vendors: Jenkins project Products: Jenkins NeuVector Vulnerability Scanner Plugin Description: Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1504 - http://www.openwall.com/lists/oss-security/2019/09/25/3
CVE ID: CVE-2019-10431 State: PUBLISHED Published: 2019-10-01T13:45:19 Last Updated: 2024-08-04T22:24:18.372Z Vendors: Jenkins project Products: Jenkins Script Security Plugin Description: A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.64 and earlier related to the handling of default parameter expressions in constructors allowed attackers to execute arbitrary code in sandboxed scripts. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-10-01/#SECURITY-1579 - http://www.openwall.com/lists/oss-security/2019/10/01/2 - https://access.redhat.com/errata/RHSA-2019:4097 - https://access.redhat.com/errata/RHSA-2019:4055 - ht
ty/2019/10/01/2 - https://access.redhat.com/errata/RHSA-2019:4097 - https://access.redhat.com/errata/RHSA-2019:4055 - https://access.redhat.com/errata/RHSA-2019:4089