Exploitation Summary
EIP tracks 3 public exploits for CVE-2019-1003002.
PoCs published by Metasploit, orange, Orange Tsai, Mikhail Egorov, George Noseevich, wvu, including Metasploit module exploits/multi/http/jenkins_metaprogramming.
AI-analyzed exploit summary This Metasploit module exploits CVE-2019-1003002 in Jenkins by bypassing ACLs via dynamic routing and leveraging Groovy metaprogramming to execute arbitrary code. It downloads and executes a malicious JAR file, achieving remote code execution.
Description
A sandbox bypass vulnerability exists in Pipeline: Declarative Plugin 1.3.3 and earlier in pipeline-model-definition/src/main/groovy/org/jenkinsci/plugins/pipeline/modeldefinition/parser/Converter.groovy that allows attackers with Overall/Read permission to provide a pipeline script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.
Exploits (3)
This Metasploit module exploits CVE-2019-1003002 in Jenkins by bypassing ACLs via dynamic routing and leveraging Groovy metaprogramming to execute arbitrary code. It downloads and executes a malicious JAR file, achieving remote code execution.
This exploit leverages a vulnerability in Jenkins Groovy scripts (CVE-2019-1003002) by crafting a malicious JAR file that executes arbitrary code via the Grape dependency resolver. The PoC demonstrates how to trigger remote code execution by hosting a malicious JAR and referencing it in a Jenkins script console.
This Metasploit module exploits CVE-2018-1000408 in Jenkins by bypassing ACLs via dynamic routing and leveraging Groovy metaprogramming to achieve remote code execution (RCE). It supports two targets: Unix in-memory execution and Java dropper via a malicious JAR file.
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H