VULNERABILITY INTELLIGENCE

CVE-2019-10458

CVSS score9.9 CRITICAL
EPSS probability1.92%
CISA KEVNot currently listed
Published2019-10-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

Jenkins Puppet Enterprise Pipeline 1.3.1 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references