https://bugzilla.redhat.com/show_bug.cgi?id=1471060
Bug ID: 1471060
Summary: CVE-2017-1000095 jenkins-plugin-script-security:
Unsafe methods in the default whitelist (SECURITY-538)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: bleanhar(a)redhat.com, ccoleman(a)redhat.com,
dedgar(a)redhat.com, dmcphers(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jgoulding(a)redhat.com, jkeck(a)redhat.com,
joelsmith(a)redhat.com, kseifried(a)redhat.com,
mizdebsk(a)redhat.com, msrb(a)redhat.com
The default whitelist included the entries:
DefaultGroovyMethods.putAt(Object, String, Object)
DefaultGroovyMethods.getAt(Object, String)
These allowed circumventing many of the access restrictions implemented in the
script sandbox by using e.g. currentBuild['rawBuild'] rather than
currentBuild.rawBuild.
Additionally, the following entries allowed accessing private data that would
not be accessible otherwise due to script security:
groovy.json.JsonOutput.toJson(Closure)
groovy.json.JsonOutput.toJson(Object)
External References:
https://jenkins.io/security/advisory/2017-07-10/
--
You are receiving this mail because:
You are on the CC list for the bug.