https://bugzilla.redhat.com/show_bug.cgi?id=1670290
Paul Harvey <pharvey(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |CLOSED
CC|ahardin(a)redhat.com, |java-sig-commits(a)lists.fedo
|aos-bugs(a)redhat.com, |raproject.org,
|bleanhar(a)redhat.com, |lkundrak(a)v3.sk,
|bparees(a)redhat.com, |mizdebsk(a)redhat.com,
|ccoleman(a)redhat.com, |msrb(a)redhat.com
|dedgar(a)redhat.com, |
|eparis(a)redhat.com, |
|jgoulding(a)redhat.com, |
|jokerman(a)redhat.com, |
|mchappel(a)redhat.com, |
|wzheng(a)redhat.com |
Resolution|--- |NOTABUG
Summary|jenkins-plugin-workflow-cps |jenkins-plugin-groovy:
|: Sandbox Bypass in Groovy |Sandbox Bypass in Groovy
|Plugin (SECURITY-1293) |Plugin (SECURITY-1293)
Whiteboard|impact=important,public=201 |impact=important,public=201
|90128,reported=20190128,sou |90128,reported=20190128,sou
|rce=oss-security,cvss3=8.8/ |rce=oss-security,cvss3=8.8/
|CVSS:3.0/AV:N/AC:L/PR:L/UI: |CVSS:3.0/AV:N/AC:L/PR:L/UI:
|N/S:U/C:H/I:H/A:H,cwe=CWE-9 |N/S:U/C:H/I:H/A:H,cwe=CWE-9
|6,openshift-enterprise-3.2/ |6,fedora-all/groovy=affecte
|jenkins-plugin-workflow-cps |d
|=wontfix,openshift-enterpri |
|se-3.3/jenkins-plugin-workf |
|low-cps=wontfix,openshift-e |
|nterprise-3.4/jenkins-plugi |
|n-workflow-cps=wontfix,open |
|shift-enterprise-3.5/jenkin |
|s-plugin-workflow-cps=wontf |
|ix,openshift-enterprise-3.7 |
|/jenkins-plugin-workflow-cp |
|s=wontfix,openshift-enterpr |
|ise-3.6/jenkins-plugin-work |
|flow-cps=wontfix,openshift- |
|enterprise-3.9/jenkins-plug |
|in-workflow-cps=wontfix,ope |
|nshift-enterprise-3.10/jenk |
|ins-plugin-workflow-cps=won |
|tfix,openshift-enterprise-3 |
|.11/jenkins-plugin-workflow |
|-cps=affected,fedora-all/gr |
|oovy-sandbox=affected,opens |
|hift-enterprise-4.0/jenkins |
|-plugin-workflow-cps=affect |
|ed |
Last Closed| |2019-01-31 15:26:13
--- Comment #2 from Paul Harvey <pharvey(a)redhat.com> ---
This flaw is actually referring to a sandbox escape in
https://plugins.jenkins.io/groovy aka
https://github.com/jenkinsci/groovy-plugin; *not* groovy-sandbox aka
https://github.com/jenkinsci/groovy-sandbox/
Removing openshift-enterprise-3.x.
--
You are receiving this mail because:
You are on the CC list for the bug.