[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fomBrZ4RjofxRifZ91GWTSxTrt08HKWxmHnMCjacVAqs":3,"g5a-risk:CVE-2019-1003000":138},{"success":4,"data":5,"meta":136},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":54,"references":55,"referencesCount":86,"weaknesses":87,"weaknessesCount":91,"isActivelyExploited":92,"cisaInfo":26,"otxData":26,"relatedBlogPosts":93,"seoMetadata":94,"configurations":119,"relatedVendorCves":134,"notableEvents":135},"CVE-2019-1003000","What is CVE-2019-1003000?","A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src\u002Fmain\u002Fjava\u002Forg\u002Fjenkinsci\u002Fplugins\u002Fscriptsecurity\u002Fsandbox\u002Fgroovy\u002FGroovySandbox.java that allows attackers with the ability to provide sandboxed scripts to execute arbitrary code on the Jenkins master JVM.","A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src\u002Fmain\u002Fjava\u002Forg\u002Fjenkinsci\u002Fplugins\u002Fscriptsecurity\u002Fsandbox\u002Fgroovy\u002FGroovyS...","2019-01-22T14:29:00.267","2023-10-25T18:16:00.75",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.98375,[40,40,40,40,40,40,40],"High",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"jenkins","script_security","*","cpe:2.3:a:jenkins:script_security:*:*:*:*:*:jenkins:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"redhat","openshift_container_platform","3.11","cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",2,[56,63,67,71,74,79,83],{"url":57,"source":58,"tags":59},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F152132\u002FJenkins-ACL-Bypass-Metaprogramming-Remote-Code-Execution.html","Packetstormsecurity",[60,61,62],"Exploit","Third Party Advisory","VDB Entry",{"url":64,"source":65,"tags":66},"http:\u002F\u002Fwww.rapid7.com\u002Fdb\u002Fmodules\u002Fexploit\u002Fmulti\u002Fhttp\u002Fjenkins_metaprogramming","Rapid7",[61],{"url":68,"source":69,"tags":70},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHBA-2019:0326","Red Hat",[61],{"url":72,"source":69,"tags":73},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHBA-2019:0327",[61],{"url":75,"source":76,"tags":77},"https:\u002F\u002Fjenkins.io\u002Fsecurity\u002Fadvisory\u002F2019-01-08\u002F#SECURITY-1266","Jenkins",[78],"Vendor Advisory",{"url":80,"source":81,"tags":82},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F46453\u002F","Exploit-db",[60,61,62],{"url":84,"source":81,"tags":85},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F46572\u002F",[60,61,62],7,[88],{"id":89,"name":89,"description":90},"Unknown","NVD-CWE-Other",1,false,[],{"title":95,"metaDescription":96,"keywords":97,"canonicalUrl":98,"structuredData":99},"What is CVE-2019-1003000? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-1003000, a high severity cyber security vulnerability from 2019. High exploit probability (98.4%). A sandbox bypass vulner...","CVE-2019-1003000, CVE-2019-1003000 vulnerability, CVE-2019-1003000 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, jenkins security, redhat security, script_security vulnerability, openshift_container_platform vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2019-1003000",{"@context":100,"@type":101,"headline":95,"description":96,"datePublished":10,"dateModified":11,"author":102,"publisher":106,"about":110,"mainEntityOfPage":114,"articleSection":117,"keywords":118},"https:\u002F\u002Fschema.org","TechArticle",{"@type":103,"name":104,"url":105},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":103,"name":104,"url":105,"logo":107},{"@type":108,"url":109},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":111,"name":6,"description":112,"additionalType":113},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":115,"@id":116},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-1003000","Cybersecurity","CVE-2019-1003000, CVE-2019-1003000 vulnerability, CVE-2019-1003000 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[120,128],{"Operator":26,"Negate":26,"Nodes":121},[122],{"Operator":123,"Negate":26,"CPEMatch":124},"OR",[125],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":126,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":127},"92354498-B477-4BD9-A0D1-8420AECAAD7C","1.49",{"Operator":26,"Negate":26,"Nodes":129},[130],{"Operator":123,"Negate":26,"CPEMatch":131},[132],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":133,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2F87326E-0B56-4356-A889-73D026DB1D4B",[],[],{"lastModified":11,"cacheTime":137,"version":32},1792353249987,{"score":139,"band":42,"action":140,"scoredAt":141},84,"Emergency patch","2026-10-16T06:45:27.837988+00:00"]