Exploited vulnerability
CVE-2019-1003029
TLP:CLEAR
Jenkins Script Security Plugin Sandbox Bypass Vulnerability
Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox.
Facts
- Vendor: Jenkins
- Product: Script Security Plugin
- CVSS: 9.9
- EPSS (probability of exploitation within 30 days): 74.4 %
- On CISA's Known Exploited Vulnerabilities list since: 25 April 2022
- First known exploitation: 25 April 2022
- CISA's deadline for US federal agencies: 16 May 2022
- First seen by Risk Letters: 25 April 2022
Members see which Nordic sectors the flaw hits, and what to do about it.
Get the full brief
Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD