Red Hat Security Advisory

RHSA-2019:2651

Red Hat OpenShift Container Platform 3.11 jenkins-2-plugins security update

Released 2019-09-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 3.11 jenkins-2-plugins-3.11.1566492396-1.el7

Fixes 3 records

TI-2019-07665 CVE-2019-10356 · GHSA-x25x-j4w4-7m59

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related…

MEDIUM 43

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of method pointer expressions allowed attackers to execute arbitrary code in sandboxed scripts.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02522 Published 2019-07-31 Partial fix · 1.62 CWE-466

TI-2019-07664 CVE-2019-10355 · GHSA-p56j-x44h-g66j

Incorrect type conversion in Jenkins Script Security Plugin

MEDIUM 43

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of type casts allowed attackers to execute arbitrary code in sandboxed scripts.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02522 Published 2019-07-31 Partial fix · 1.62 CWE-704

TI-2019-07666 CVE-2019-10357 · GHSA-9x5v-8352-244g

Missing authorization in Jenkins Pipeline: Shared Groovy Libraries Plugin

LOW 22

A missing permission check in Jenkins Pipeline: Shared Groovy Libraries Plugin 2.14 and earlier allowed users with Overall/Read access to obtain limited information about the content of SCM repositories referenced by glo…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01213 Published 2019-07-31 Partial fix · 2.15 CWE-862