https://bugzilla.redhat.com/show_bug.cgi?id=1735518
Bug ID: 1735518
Summary: CVE-2019-10356 jenkins-plugin-script-security: Sandbox
bypass through method pointer expressions in Script
Security Plugin
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Whiteboard: impact=important,public=20190801,reported=20190801,sou
rce=internet,cvss3=8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:
U/C:H/I:H/A:H,cwe=CWE-20,fedora-all/jenkins-script-sec
urity-plugin=affected,openshift-enterprise-3.9/jenkins
-script-security-plugin=new,openshift-enterprise-3.10/
jenkins-script-security-plugin=new,openshift-enterpris
e-3.11/jenkins-2-plugins=new,openshift-enterprise-4.1/
jenkins-2-plugins=new,openshift-4.2/jenkins-2-plugins=
new
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: sfowler(a)redhat.com
CC: abenaiss(a)redhat.com, ahardin(a)redhat.com,
bleanhar(a)redhat.com, ccoleman(a)redhat.com,
dedgar(a)redhat.com, eparis(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jgoulding(a)redhat.com, jokerman(a)redhat.com,
mchappel(a)redhat.com, mizdebsk(a)redhat.com,
msrb(a)redhat.com, vbobade(a)redhat.com
Blocks: 1735517
Target Milestone: ---
Classification: Other
Sandbox protection in Jenkins Script Security Plugin could be circumvented
through crafted subexpressions used as arguments to method pointer expressions.
This allowed attackers able to specify sandboxed scripts to execute arbitrary
code in the context of the Jenkins master JVM.
Method pointer subexpressions are now subject to sandbox protection.
External References:
https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1465%20(2)
--
You are receiving this mail because:
You are on the CC list for the bug.