CVE-2019-1003040 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	9.8 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
jenkins	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 83%

Vendor	Product	Version
jenkins	script_security	𝑥 ≤ 1.55
redhat	openshift_container_platform	3.11

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-470 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
The application uses external input with reflection to select which classes or code to use, but it does not sufficiently prevent the input from selecting improper classes or code.

References

http://www.openwall.com/lists/oss-security/2019/03/28/2

http://www.securityfocus.com/bid/107628

https://access.redhat.com/errata/RHSA-2019:1423

https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1353

http://www.openwall.com/lists/oss-security/2019/03/28/2

http://www.securityfocus.com/bid/107628

https://access.redhat.com/errata/RHSA-2019:1423

https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1353