Every CVE Search/ Get API key

CVE-2017-1000096

Arbitrary code execution due to incomplete sandbox protection in Jenkins Pipeline

8.8 HighFix available

Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be exploited e.g. by regular Jenkins users with the permission to configure Pipelines in Jenkins, or by trusted committers to repositories containing Jenkinsfiles.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.61%Up 0.5 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 8.8

Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be exploited e.g. by regular Jenkins users with the permission to configure Pipelines in Jenkins, or by trusted committers to repositories containing Jenkinsfiles.

Record
CVE-2017-1000096
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-732
Updated
2026-11-02
CVE List No score

Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be exploited e.g. by regular Jenkins users with the permission to configure Pipelines in Jenkins, or by trusted committers to repositories containing Jenkinsfiles.

Record
CVE-2017-1000096
Updated
2026-11-02
EUVDEUVD-2022-4572 No score

Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be exploited e.g. by regular Jenkins users with the permission to configure Pipelines in Jenkins, or by trusted committers to repositories containing Jenkinsfiles.

Record
EUVD-2022-4572
Updated
2026-11-03
GitHub AdvisoriesGHSA-mhwq-4mh7-fv7c 8.8

Arbitrary code execution due to incomplete sandbox protection in Jenkins Pipeline

Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be exploited e.g. by regular Jenkins users with the permission to configure Pipelines in Jenkins, or by trusted committers to repositories containing Jenkinsfiles.

Record
GHSA-mhwq-4mh7-fv7c
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-732
Updated
2026-11-02
OSV 8.8

Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be exploited e.g. by regular Jenkins users with the permission to configure Pipelines in Jenkins, or by trusted committers to repositories containing Jenkinsfiles.

Record
CVE-2017-1000096
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVGHSA-mhwq-4mh7-fv7c 8.8

Arbitrary code execution due to incomplete sandbox protection in Jenkins Pipeline

Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be exploited e.g. by regular Jenkins users with the permission to configure Pipelines in Jenkins, or by trusted committers to repositories containing Jenkinsfiles.

Record
GHSA-mhwq-4mh7-fv7c
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-732
Updated
2026-11-02
OSVRHBA-2017:2642 8.8

Red Hat Bug Fix Advisory: OpenShift Container Platform 3.6.1 bug fix and enhancement update

Record
RHBA-2017:2642
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
org.jenkins-ci.plugins.workflow:workflow-cps
Maven
 through 2.36
2.36.1
org.jenkins-ci.plugins.workflow:workflow-cps
Maven
 before 2.36.1, plus listed versions
0.1-beta-10.1-beta-20.1-beta-30.1-beta-40.1-beta-5
Show 45 moreShow less
0.1-beta-60.1-beta-70.1-beta-81.01.0-beta-11.11.101.10-beta-11.10.11.111.11-beta-11.11-beta-21.11-beta-31.11-beta-41.121.12-beta-11.12-beta-21.12-beta-31.131.141.14-beta-11.14.11.14.1-beta-11.14.21.151.15-beta-11.21.31.41.4.11.4.21.4.31.4.3-beta-11.51.61.6-alpha-11.71.7-alpha-11.81.91.9-beta-12.02.12.102.11
2.36.1
atomic-openshift
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:3.6.173.0.21-1.git.0.f95b0e7.el7
0:3.6.173.0.21-1.git.0.f95b0e7.el7
atomic-openshift-clients
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:3.6.173.0.21-1.git.0.f95b0e7.el7
0:3.6.173.0.21-1.git.0.f95b0e7.el7
atomic-openshift-clients-redistributable
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:3.6.173.0.21-1.git.0.f95b0e7.el7
0:3.6.173.0.21-1.git.0.f95b0e7.el7
atomic-openshift-cluster-capacity
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:3.6.173.0.21-1.git.0.f95b0e7.el7
0:3.6.173.0.21-1.git.0.f95b0e7.el7
atomic-openshift-docker-excluder
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:3.6.173.0.21-1.git.0.f95b0e7.el7
0:3.6.173.0.21-1.git.0.f95b0e7.el7
atomic-openshift-dockerregistry
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:3.6.173.0.21-1.git.0.f95b0e7.el7
0:3.6.173.0.21-1.git.0.f95b0e7.el7
atomic-openshift-excluder
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:3.6.173.0.21-1.git.0.f95b0e7.el7
0:3.6.173.0.21-1.git.0.f95b0e7.el7
atomic-openshift-federation-services
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:3.6.173.0.21-1.git.0.f95b0e7.el7
0:3.6.173.0.21-1.git.0.f95b0e7.el7
Show 27 moreShow less
Affected packages
PackageAffectedFixed
atomic-openshift-master
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:3.6.173.0.21-1.git.0.f95b0e7.el7
0:3.6.173.0.21-1.git.0.f95b0e7.el7
atomic-openshift-node
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:3.6.173.0.21-1.git.0.f95b0e7.el7
0:3.6.173.0.21-1.git.0.f95b0e7.el7
atomic-openshift-pod
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:3.6.173.0.21-1.git.0.f95b0e7.el7
0:3.6.173.0.21-1.git.0.f95b0e7.el7
atomic-openshift-sdn-ovs
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:3.6.173.0.21-1.git.0.f95b0e7.el7
0:3.6.173.0.21-1.git.0.f95b0e7.el7
atomic-openshift-service-catalog
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:3.6.173.0.21-1.git.0.f95b0e7.el7
0:3.6.173.0.21-1.git.0.f95b0e7.el7
atomic-openshift-tests
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:3.6.173.0.21-1.git.0.f95b0e7.el7
0:3.6.173.0.21-1.git.0.f95b0e7.el7
fluentd
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:0.12.39-2.el7
0:0.12.39-2.el7
fluentd-doc
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:0.12.39-2.el7
0:0.12.39-2.el7
jenkins-2-plugins
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:3.7.1502412812-1.el7
0:3.7.1502412812-1.el7
kibana
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:4.6.4-3.el7
0:4.6.4-3.el7
kibana-debuginfo
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:4.6.4-3.el7
0:4.6.4-3.el7
rubygem-cool.io
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:1.5.1-1.el7
0:1.5.1-1.el7
rubygem-cool.io-debuginfo
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:1.5.1-1.el7
0:1.5.1-1.el7
rubygem-cool.io-doc
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:1.5.1-1.el7
0:1.5.1-1.el7
rubygem-excon
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:0.58.0-1.el7
0:0.58.0-1.el7
rubygem-excon-doc
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:0.58.0-1.el7
0:0.58.0-1.el7
rubygem-faraday
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:0.13.0-1.el7
0:0.13.0-1.el7
rubygem-faraday-doc
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:0.13.0-1.el7
0:0.13.0-1.el7
rubygem-fluent-plugin-kubernetes_metadata_filter
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:0.29.0-1.el7
0:0.29.0-1.el7
rubygem-fluent-plugin-kubernetes_metadata_filter-doc
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:0.29.0-1.el7
0:0.29.0-1.el7
rubygem-fluent-plugin-viaq_data_model
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:0.0.5-1.el7
0:0.0.5-1.el7
rubygem-fluent-plugin-viaq_data_model-doc
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:0.0.5-1.el7
0:0.0.5-1.el7
rubygem-i18n
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:0.8.6-1.el7
0:0.8.6-1.el7
rubygem-i18n-doc
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:0.8.6-1.el7
0:0.8.6-1.el7
rubygem-systemd-journal
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:1.3.0-1.el7
0:1.3.0-1.el7
rubygem-systemd-journal-doc
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:1.3.0-1.el7
0:1.3.0-1.el7
tuned-profiles-atomic-openshift-node
Red Hat:openshift:3.6::el7
From an advisory covering 4 CVEs
 before 0:3.6.173.0.21-1.git.0.f95b0e7.el7
0:3.6.173.0.21-1.git.0.f95b0e7.el7

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-1000096 is a high vulnerability (CVSS 8.8) in Jenkins Pipeline\, published October 4, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.61%, the 76th percentile. Fixed in org.jenkins-ci.plugins.workflow:workflow-cps 2.36.1.

References

Show 26 moreShow less
This page doesn't list everything

Left out here: 36 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open