[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2019-10328":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":24,"technologies":26,"references":28,"score":37,"epss_score":38,"epss_percentile":39,"is_kev":40,"cisa_kev_date_added":41,"cisa_kev_due_date":41,"cisa_ssvc":42,"attack_mappings":48,"exploits":105},245484,"CVE-2019-10328","EUVD-2022-5283","Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin\n\nJenkins Pipeline Remote Loader Plugin before 1.5 provided a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.","2022-05-24T22:00:00Z",{"cvss_v3.0":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":19,"availabilityImpact":17,"privilegesRequired":19,"confidentialityImpact":17},"CHANGED","3.0",9.9,"NETWORK","CRITICAL","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","HIGH","NONE","LOW",true,[22,23],"CWE-693","CWE-183",[25],"cpe:2.3:a:jenkins:pipeline_remote_loader:*:*:*:*:*:jenkins:*:*",[27],"Jenkins Pipeline Remote Loader",[29,30,31,32,33,34,35,36],"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2019\u002F05\u002F31\u002F2","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F108540","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHBA-2019:1605","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:1636","https:\u002F\u002Fjenkins.io\u002Fsecurity\u002Fadvisory\u002F2019-05-31\u002F#SECURITY-921","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2019-10328","https:\u002F\u002Fgithub.com\u002Fjenkinsci\u002Fworkflow-remote-loader-plugin\u002Fcommit\u002F6f9d60f614359720ec98e22b80ba15e8bf88e712","https:\u002F\u002Fgithub.com\u002Fjenkinsci\u002Fworkflow-remote-loader-plugin",0.7,0.01939,0.79991,false,null,{"timestamp":41,"automatable":43,"tech_impact":44,"exploitation":45,"cisa_decision":46,"cisa_remediation_timeline":47},"no","partial","none",{},"FSU",[49,55,66,73,81,90,97],{"name":50,"source":51,"tactics":52,"technique_id":54},"Exploit Public-Facing Application","attack_vector",[53],"initial-access","T1190",{"name":56,"source":57,"cwe_ids":58,"tactics":59,"capec_ids":62,"technique_id":65},"Network Sniffing","capec",[22],[60,61],"credential-access","discovery",[63,64],"CAPEC-57","CAPEC-65","T1040",{"name":67,"source":57,"cwe_ids":68,"tactics":69,"capec_ids":70,"technique_id":72},"File and Directory Discovery",[22],[61],[71],"CAPEC-127","T1083",{"name":74,"source":57,"cwe_ids":75,"tactics":76,"capec_ids":78,"technique_id":80},"Transmitted Data Manipulation",[22],[77],"impact",[79],"CAPEC-668","T1565.002",{"name":82,"source":57,"cwe_ids":83,"tactics":84,"capec_ids":87,"technique_id":89},"Executable Installer File Permissions Weakness",[22],[85,86],"execution","stealth",[88],"CAPEC-17","T1574.005",{"name":91,"source":57,"cwe_ids":92,"tactics":93,"capec_ids":94,"technique_id":96},"Services File Permissions Weakness",[22],[85,86],[95,88],"CAPEC-1","T1574.010",{"name":98,"source":57,"cwe_ids":99,"tactics":100,"capec_ids":102,"technique_id":104},"Escape to Host",[22],[101],"privilege-escalation",[103],"CAPEC-480","T1611",[]]