NVD

Id
82325  
Name
CVE-2016-3102  
Description
The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs (1) direct field access or (2) get/set array operations.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-02-28  
Published
2017-02-09  
Modified Date
2017-02-28  
Seq
2016-3102  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
406331 82325 CVE-2016-6600 http://packetstormsecurity.com/files/138244/WebNMS-Framework-5.2-SP1-Traversal-Weak-Obfuscation-User-Impersonation.html  View
406332 82325 CVE-2016-6600 20160812 [CVE-2016-6600/1/2/3]: Multiple vulnerabilities (RCE, file download, etc) in WebNMS Framework 5.2 / 5.2 SP1  View
406333 82325 CVE-2016-6600 20160808 [CVE-2016-6600/1/2/3]: Multiple vulnerabilities (RCE, file download, etc) in WebNMS Framework 5.2 / 5.2 SP1  View
406334 82325 CVE-2016-6600 92402  View
406335 82325 CVE-2016-6600 https://blogs.securiteam.com/index.php/archives/2712  View
406336 82325 CVE-2016-6600 https://forums.webnms.com/topic/recent-vulnerabilities-in-webnms-and-how-to-protect-the-server-against-them  View
406337 82325 CVE-2016-6600 https://github.com/pedrib/PoC/blob/master/advisories/webnms-5.2-sp1-pwn.txt  View
406338 82325 CVE-2016-6600 40229  View
406888 82325 CVE-2017-3279 1037639  View
406889 82325 CVE-2017-3279 1037639  View

Related JVN