CVE:CVE-2019-1003000
CNNVD:CNNVD-201901-777
Jenkins是Jenkins开源的一个应用软件。一个开源自动化服务器Jenkins提供了数百个插件来支持构建，部署和自动化任何项目。
Jenkins Script Security Plugin 2.49及之前版本中的 src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.jav文件存在安全漏洞，该漏洞允许攻击者执行任意代码。
solution:Upgrade jenkins script_security to a higher version than 1.49,and avoid the version (,1.49]; Upgrade redhat openshift_container_platform to a higher version than 3.11,and avoid the version 3.11