CVE: CVE-2019-10458

Export to Word

Jenkins Puppet Enterprise Pipeline 1.3.1 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.00326
Percentile: 0.5491

CVSS Scoring

CVSS v3.1 Score: 9.9

Severity: CRITICAL

Affected Products

← Back to Home