{
  "threat_severity" : "Important",
  "public_date" : "2017-07-10T00:00:00Z",
  "bugzilla" : {
    "description" : "jenkins-plugin-workflow-cps: Arbitrary code execution due to incomplete sandbox protection (SECURITY-551)",
    "id" : "1471064",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1471064"
  },
  "cvss3" : {
    "cvss3_base_score" : "8.8",
    "cvss3_scoring_vector" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
    "status" : "verified"
  },
  "cwe" : "CWE-184",
  "details" : [ "Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be exploited e.g. by regular Jenkins users with the permission to configure Pipelines in Jenkins, or by trusted committers to repositories containing Jenkinsfiles.", "The jenkins-plugin-script-security has incomplete sandbox protection which allows attackers to execute arbitrary code via constructors, instance variable initializers, and instance initializers in Pipeline scripts. Exploitation of this requires the attacker to have permission to configure Pipelines in Jenkins or be a trusted committers to repositories containing Jenkinsfiles and for that Jenkins instance to be hosting other projects as well that the attacker should not have access to." ],
  "statement" : "This issue affects the versions of jenkins-plugin-workflow-cps  as shipped with Red Hat OpenShift Enterprise 3. However, this flaw is of low impact under the supported scenarios in OpenShift Enterprise 3. A future update may address this issue.",
  "acknowledgement" : "Red Hat would like to thank the Jenkins project for reporting this issue. Upstream acknowledges Green and Simon St John as the original reporters.",
  "affected_release" : [ {
    "product_name" : "Red Hat OpenShift Container Platform 3.6",
    "release_date" : "2017-09-08T00:00:00Z",
    "advisory" : "RHBA-2017:2642",
    "cpe" : "cpe:/a:redhat:openshift:3.6::el7",
    "package" : "atomic-openshift-0:3.6.173.0.21-1.git.0.f95b0e7.el7"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.6",
    "release_date" : "2017-09-08T00:00:00Z",
    "advisory" : "RHBA-2017:2642",
    "cpe" : "cpe:/a:redhat:openshift:3.6::el7",
    "package" : "fluentd-0:0.12.39-2.el7"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.6",
    "release_date" : "2017-09-08T00:00:00Z",
    "advisory" : "RHBA-2017:2642",
    "cpe" : "cpe:/a:redhat:openshift:3.6::el7",
    "package" : "jenkins-2-plugins-0:3.7.1502412812-1.el7"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.6",
    "release_date" : "2017-09-08T00:00:00Z",
    "advisory" : "RHBA-2017:2642",
    "cpe" : "cpe:/a:redhat:openshift:3.6::el7",
    "package" : "kibana-0:4.6.4-3.el7"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.6",
    "release_date" : "2017-09-08T00:00:00Z",
    "advisory" : "RHBA-2017:2642",
    "cpe" : "cpe:/a:redhat:openshift:3.6::el7",
    "package" : "rubygem-cool.io-0:1.5.1-1.el7"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.6",
    "release_date" : "2017-09-08T00:00:00Z",
    "advisory" : "RHBA-2017:2642",
    "cpe" : "cpe:/a:redhat:openshift:3.6::el7",
    "package" : "rubygem-excon-0:0.58.0-1.el7"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.6",
    "release_date" : "2017-09-08T00:00:00Z",
    "advisory" : "RHBA-2017:2642",
    "cpe" : "cpe:/a:redhat:openshift:3.6::el7",
    "package" : "rubygem-faraday-0:0.13.0-1.el7"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.6",
    "release_date" : "2017-09-08T00:00:00Z",
    "advisory" : "RHBA-2017:2642",
    "cpe" : "cpe:/a:redhat:openshift:3.6::el7",
    "package" : "rubygem-fluent-plugin-kubernetes_metadata_filter-0:0.29.0-1.el7"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.6",
    "release_date" : "2017-09-08T00:00:00Z",
    "advisory" : "RHBA-2017:2642",
    "cpe" : "cpe:/a:redhat:openshift:3.6::el7",
    "package" : "rubygem-fluent-plugin-viaq_data_model-0:0.0.5-1.el7"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.6",
    "release_date" : "2017-09-08T00:00:00Z",
    "advisory" : "RHBA-2017:2642",
    "cpe" : "cpe:/a:redhat:openshift:3.6::el7",
    "package" : "rubygem-i18n-0:0.8.6-1.el7"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.6",
    "release_date" : "2017-09-08T00:00:00Z",
    "advisory" : "RHBA-2017:2642",
    "cpe" : "cpe:/a:redhat:openshift:3.6::el7",
    "package" : "rubygem-systemd-journal-0:1.3.0-1.el7"
  } ],
  "package_state" : [ {
    "product_name" : "Red Hat OpenShift Enterprise 3",
    "fix_state" : "Will not fix",
    "package_name" : "jenkins-plugin-workflow-cps",
    "cpe" : "cpe:/a:redhat:openshift:3",
    "impact" : "low"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2017-1000096\nhttps://nvd.nist.gov/vuln/detail/CVE-2017-1000096\nhttps://jenkins.io/security/advisory/2017-07-10/" ],
  "name" : "CVE-2017-1000096",
  "csaw" : false
}