CVEvulnerability
CVE-2016-3102
7.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-02-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.3 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-254
Description
The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs (1) direct field access or (2) get/set array operations.
Affected configurations
• jenkins script security 1.0
• jenkins script security 1.1
• jenkins script security 1.2
• jenkins script security 1.3
• jenkins script security 1.4
• jenkins script security 1.5
• jenkins script security 1.6
• jenkins script security 1.7
• jenkins script security 1.8
• jenkins script security 1.9
• jenkins script security 1.10
• jenkins script security 1.11
• jenkins script security 1.12
• jenkins script security 1.13
• jenkins script security 1.14
• jenkins script security 1.15
• jenkins script security 1.16
• jenkins script security 1.17
• jenkins script security 1.18