[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkOyt5g-brp01p_J3BqLkNyeNaSdWXwpJuLa3RG8sG2s":3,"g5a-risk:CVE-2019-1003029":155},{"success":4,"data":5,"meta":153},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":27,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":62,"references":63,"referencesCount":96,"weaknesses":97,"weaknessesCount":101,"isActivelyExploited":4,"cisaInfo":102,"otxData":27,"relatedBlogPosts":103,"seoMetadata":104,"configurations":129,"relatedVendorCves":144,"notableEvents":145},"CVE-2019-1003029","What is CVE-2019-1003029?","A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src\u002Fmain\u002Fjava\u002Forg\u002Fjenkinsci\u002Fplugins\u002Fscriptsecurity\u002Fsandbox\u002Fgroovy\u002FGroovySandbox.java, src\u002Fmain\u002Fjava\u002Forg\u002Fjenkinsci\u002Fplugins\u002Fscriptsecurity\u002Fsandbox\u002Fgroovy\u002FSecureGroovyScript.java that allows attackers with Overall\u002FRead permission to execute arbitrary code on the Jenkins master JVM.","A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src\u002Fmain\u002Fjava\u002Forg\u002Fjenkinsci\u002Fplugins\u002Fscriptsecurity\u002Fsandbox\u002Fgroovy...","2019-03-08T21:29:00.297","2025-10-24T14:49:04.597",9.9,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","CHANGED","HIGH","CRITICAL",null,3.1,6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[36],{"Source":17,"Type":18,"CVSSData":37,"BaseSeverity":44,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":47,"ObtainAllPrivilege":47,"ObtainUserPrivilege":47,"ObtainOtherPrivilege":47,"UserInteractionRequired":47},{"Version":38,"VectorString":39,"AccessVector":21,"AccessComplexity":22,"Authentication":40,"ConfidentialityImpact":41,"IntegrityImpact":41,"AvailabilityImpact":41,"BaseScore":42,"BaseSeverity":43,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"","MEDIUM",8,6.4,false,0.7444,[48,48,48,48,48,48,48],"Critical",[52,57],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"jenkins","script_security","*","cpe:2.3:a:jenkins:script_security:*:*:*:*:*:jenkins:*:*",{"vendor":58,"product":59,"version":60,"criteria":61,"vulnerable":4},"redhat","openshift_container_platform","3.11","cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",2,[64,70,75,79,83,85,87,89,91],{"url":65,"source":66,"tags":67},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F166778\u002FJenkins-Remote-Code-Execution.html","Packetstormsecurity",[68,69],"Third Party Advisory","VDB Entry",{"url":71,"source":72,"tags":73},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F107476","Securityfocus",[74,68,69],"Broken Link",{"url":76,"source":77,"tags":78},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:0739","Red Hat",[68],{"url":80,"source":81,"tags":82},"https:\u002F\u002Fjenkins.io\u002Fsecurity\u002Fadvisory\u002F2019-03-06\u002F#SECURITY-1336%20%281%29","Jenkins",[68],{"url":65,"source":66,"tags":84},[68,69],{"url":71,"source":72,"tags":86},[74,68,69],{"url":76,"source":77,"tags":88},[68],{"url":80,"source":81,"tags":90},[68],{"url":92,"source":93,"tags":94},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1003029","CISA",[95],"US Government Resource",9,[98],{"id":99,"name":99,"description":100},"Unknown","NVD-CWE-noinfo",1,{"shortDescription":43,"requiredAction":43,"vulnerabilityName":43,"dateAdded":27},[],{"title":105,"metaDescription":106,"keywords":107,"canonicalUrl":108,"structuredData":109},"What is CVE-2019-1003029? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-1003029, a critical severity cyber security vulnerability from 2019. High exploit probability (74.4%). A sandbox bypass vu...","CVE-2019-1003029, CVE-2019-1003029 vulnerability, CVE-2019-1003029 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, jenkins security, redhat security, script_security vulnerability, openshift_container_platform vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2019-1003029",{"@context":110,"@type":111,"headline":105,"description":106,"datePublished":10,"dateModified":11,"author":112,"publisher":116,"about":120,"mainEntityOfPage":124,"articleSection":127,"keywords":128},"https:\u002F\u002Fschema.org","TechArticle",{"@type":113,"name":114,"url":115},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":113,"name":114,"url":115,"logo":117},{"@type":118,"url":119},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":121,"name":6,"description":122,"additionalType":123},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":125,"@id":126},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-1003029","Cybersecurity","CVE-2019-1003029, CVE-2019-1003029 vulnerability, CVE-2019-1003029 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[130,138],{"Operator":27,"Negate":27,"Nodes":131},[132],{"Operator":133,"Negate":47,"CPEMatch":134},"OR",[135],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":136,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":137},"4F309F6A-5D2A-4E7E-9C91-FA5E6413F498","1.53",{"Operator":27,"Negate":27,"Nodes":139},[140],{"Operator":133,"Negate":47,"CPEMatch":141},[142],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2F87326E-0B56-4356-A889-73D026DB1D4B",[],[146],{"id":147,"eventType":148,"eventTime":149,"details":150,"label":151,"color":152},"4da63cf4-c3b0-4c33-bbe8-ef2dac278c1b","LOW_EPSS_DELTA","2026-06-16T04:06:08.424738+00:00","Daily EPSS score decreased by 0.184 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":154,"version":38},1792347665617,{"score":156,"band":50,"action":157,"scoredAt":158},90,"Emergency patch","2026-10-16T06:45:44.607564+00:00"]