CVE-2019-1003000

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Jenkins 2.137 and Pipeline Groovy Plugin 2.61 - ACL Bypass and Metaprogramming Remote Code Execution (Metasploit)2019-03-19 · remote · java · Verified
• Jenkins Plugin Script Security < 1.50/Declarative < 1.3.4.1/Groovy < 2.61.1 - Remote Code Execution (PoC)2019-02-19 · webapps · java · Verified
• Jenkins Plugin Script Security 1.49/Declarative 1.3.4/Groovy 2.60 - Remote Code Execution2019-02-25 · webapps · java

Impact

A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java that allows attackers with the ability to provide sandboxed scripts to execute arbitrary code on the Jenkins master JVM.

Affected products

References

• NVD record
• CVE.org record
• http://packetstormsecurity.com/files/152132/Jenkins-ACL-Bypass-Metaprogramming-Remote-Code-Execution.html
• http://www.rapid7.com/db/modules/exploit/multi/http/jenkins_metaprogramming
• https://access.redhat.com/errata/RHBA-2019:0326
• https://access.redhat.com/errata/RHBA-2019:0327
• https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266
• https://www.exploit-db.com/exploits/46453/
• https://www.exploit-db.com/exploits/46572/
• http://packetstormsecurity.com/files/152132/Jenkins-ACL-Bypass-Metaprogramming-Remote-Code-Execution.html
• http://www.rapid7.com/db/modules/exploit/multi/http/jenkins_metaprogramming
• https://access.redhat.com/errata/RHBA-2019:0326
• https://access.redhat.com/errata/RHBA-2019:0327
• https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266
• https://www.exploit-db.com/exploits/46453/
• https://www.exploit-db.com/exploits/46572/