Логотип exploitDog
bind:CVE-2018-1000865
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2018-1000865

Количество 4

Количество 4

redhat логотип

CVE-2018-1000865

больше 7 лет назад

A sandbox bypass vulnerability exists in Script Security Plugin 1.47 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM, if plugins using the Groovy sandbox are installed.

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2018-1000865

около 7 лет назад

A sandbox bypass vulnerability exists in Script Security Plugin 1.47 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM, if plugins using the Groovy sandbox are installed.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2018-1000865

около 7 лет назад

A sandbox bypass vulnerability exists in Script Security Plugin 1.47 a ...

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-p4p5-3v2j-w5rv

больше 3 лет назад

Improper Privilege Management in Jenkins

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2018-1000865

A sandbox bypass vulnerability exists in Script Security Plugin 1.47 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM, if plugins using the Groovy sandbox are installed.

CVSS3: 8.8
1%
Низкий
больше 7 лет назад
nvd логотип
CVE-2018-1000865

A sandbox bypass vulnerability exists in Script Security Plugin 1.47 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM, if plugins using the Groovy sandbox are installed.

CVSS3: 8.8
1%
Низкий
около 7 лет назад
debian логотип
CVE-2018-1000865

A sandbox bypass vulnerability exists in Script Security Plugin 1.47 a ...

CVSS3: 8.8
1%
Низкий
около 7 лет назад
github логотип
GHSA-p4p5-3v2j-w5rv

Improper Privilege Management in Jenkins

CVSS3: 8.8
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу