← Back

Puppet Enterprise Pipeline

puppet_enterprise_pipeline

Vendor: Jenkins • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-10458
1Jenkins
1Puppet Enterprise Pipeline
Jun 17, 2026
Oct 16, 2019
N/A· v4
9.9 CRITICAL· v3
6.5 MEDIUM· v2
Jenkins Puppet Enterprise Pipeline 1.3.1 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code.