Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2016-3102

Опубликовано: 09 фев. 2017
Источник: debian
EPSS Низкий

Описание

The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs (1) direct field access or (2) get/set array operations.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
jenkinsremovedpackage

EPSS

Процентиль: 76%
0.01755
Низкий

Связанные уязвимости

CVSS3: 7.3
ubuntu
больше 9 лет назад

The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs (1) direct field access or (2) get/set array operations.

redhat
больше 10 лет назад

The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs (1) direct field access or (2) get/set array operations.

CVSS3: 7.3
nvd
больше 9 лет назад

The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs (1) direct field access or (2) get/set array operations.

CVSS3: 7.3
github
больше 4 лет назад

Jenkins Script Security Plugin allows for Bypass of Groovy Sandbox Protection

EPSS

Процентиль: 76%
0.01755
Низкий