← CVE Intelligence

CVE-2019-10458

Jenkins project / Jenkins Puppet Enterprise Pipeline PUBLISHED

Description (CNA)

Jenkins Puppet Enterprise Pipeline 1.3.1 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code.

Affected (CNA)

Vendor / productVersions
Jenkins project / Jenkins Puppet Enterprise Pipelineaffected 1.3.1 and earlier

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.