SERVER-WEBAPP Jenkins Groovy metaprogramming remote code execution attempt

IPS-NPA

2 SIDs: 49498, 49499

Description

Detects an attempt to exploit CVE-2019-1003000, CVE-2019-1003001, and CVE-2019-1003002, a remote code execution flaw that can run code on the server in Jenkins Groovy metaprogramming.

CVEs

CVE-2019-1003000 CVE-2019-1003001 CVE-2019-1003002

Related blogs

npm Stealer Reads Its C2 From an Ethereum Contract

August 4, 20265 min read

References

jenkins.io