CVE-2019-1003029: Jenkins Script Security Plugin Sandbox Bypass Vulnerability

EPSS trend

Probability

74.44%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

+0.59 pp

From 73.85% on 19-09-2026

19-09-202619-10-2026

EPSS score

74.44%

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 25-04-2022
Federal due date: 16-05-2022

CISA required action

Apply updates per vendor instructions. nvd.nist.gov/vuln/detail/CVE-2019-1003029

Public exploits

1 found

MetasploitremoteVerified
Jenkins ACL Bypass and Metaprogramming RCE
exploit/multi/http/jenkins_metaprogramming
Maturity: weaponized

References

8 links

jenkins.io/security/advisory/2019-03-06/X Refsource CONFIRMThird Party AdvisoryWEB
www.securityfocus.com/bid/107476VDB EntryX Refsource BIDBroken LinkThird Party Advisory
access.redhat.com/errata/RHSA-2019:0739Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
packetstormsecurity.com/files/166778/Jenkins-Remote-Code-Execution.htmlX Refsource MISCThird Party AdvisoryVDB EntryWEB
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1003029Government ResourceUS Government ResourceWEB
nvd.nist.gov/vuln/detail/CVE-2019-1003029Advisory
github.com/jenkinsci/script-security-pluginPACKAGE
jenkins.io/security/advisory/2019-03-06/WEB

Related vulnerabilities

CVE-2018-1070redhatopenshift_container_platform+10.86%8y ago12-06-2018 13:00routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire shard to be brought down. A malicious user can use this vulnerability to cause a Denial of Service attack for other users of the router shard.CVE-2018-1085redhatopenshift_container_platform+12.28%8y ago15-06-2018 13:00openshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes the SSL client certificate authentication to be disabled. Quotations around the values of ETCD_CLIENT_CERT_AUTH and ETCD_PEER_CLIENT_CERT_AUTH in etcd.conf result in etcd being configured to allow remote users to connect without any authentication if they can access the etcd server bound to the network on the master nodes. An attacker could use this flaw to read and modify all the data about the Openshift cluster in the etcd datastore, potentially adding another compute node, or bringing down the entire cluster.CVE-2018-1000865jenkinsscript_security+21.64%7y ago10-12-2018 14:00A sandbox bypass vulnerability exists in Script Security Plugin 1.47 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM, if plugins using the Groovy sandbox are installed.CVE-2018-11307chainguardeco-java-gradle-2.10+545.73%7y ago09-07-2019 15:37An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6.CVE-2018-1002105chainguardkubeflow-pipelines+4786.98%7y ago05-12-2018 21:00In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.CVE-2018-14632ubuntugolang-github-evanphx-json-patch+222.23%8y ago06-09-2018 13:00An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.

All vulnerabilities injenkins script security plugin script_security openshift_container_platform

CVE-2019-1003029: Jenkins Script Security Plugin Sandbox Bypass Vulnerability

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References