Описание
Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be exploited e.g. by regular Jenkins users with the permission to configure Pipelines in Jenkins, or by trusted committers to repositories containing Jenkinsfiles.
The jenkins-plugin-script-security has incomplete sandbox protection which allows attackers to execute arbitrary code via constructors, instance variable initializers, and instance initializers in Pipeline scripts. Exploitation of this requires the attacker to have permission to configure Pipelines in Jenkins or be a trusted committers to repositories containing Jenkinsfiles and for that Jenkins instance to be hosting other projects as well that the attacker should not have access to.
Отчет
This issue affects the versions of jenkins-plugin-workflow-cps as shipped with Red Hat OpenShift Enterprise 3. However, this flaw is of low impact under the supported scenarios in OpenShift Enterprise 3. A future update may address this issue.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenShift Enterprise 3 | jenkins-plugin-workflow-cps | Will not fix | ||
| Red Hat OpenShift Container Platform 3.6 | atomic-openshift | Fixed | RHBA-2017:2642 | 08.09.2017 |
| Red Hat OpenShift Container Platform 3.6 | fluentd | Fixed | RHBA-2017:2642 | 08.09.2017 |
| Red Hat OpenShift Container Platform 3.6 | jenkins-2-plugins | Fixed | RHBA-2017:2642 | 08.09.2017 |
| Red Hat OpenShift Container Platform 3.6 | kibana | Fixed | RHBA-2017:2642 | 08.09.2017 |
| Red Hat OpenShift Container Platform 3.6 | rubygem-cool.io | Fixed | RHBA-2017:2642 | 08.09.2017 |
| Red Hat OpenShift Container Platform 3.6 | rubygem-excon | Fixed | RHBA-2017:2642 | 08.09.2017 |
| Red Hat OpenShift Container Platform 3.6 | rubygem-faraday | Fixed | RHBA-2017:2642 | 08.09.2017 |
| Red Hat OpenShift Container Platform 3.6 | rubygem-fluent-plugin-kubernetes_metadata_filter | Fixed | RHBA-2017:2642 | 08.09.2017 |
| Red Hat OpenShift Container Platform 3.6 | rubygem-fluent-plugin-viaq_data_model | Fixed | RHBA-2017:2642 | 08.09.2017 |
Показывать по
Дополнительная информация
Статус:
8.8 High
CVSS3
Связанные уязвимости
Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be exploited e.g. by regular Jenkins users with the permission to configure Pipelines in Jenkins, or by trusted committers to repositories containing Jenkinsfiles.
Arbitrary code execution due to incomplete sandbox protection in Jenkins Pipeline
8.8 High
CVSS3