Puppet Enterprise Pipeline

DATE	CVE	VULNERABILITY TITLE	RISK
2019-10-16	CVE-2019-10458	Unspecified vulnerability in Jenkins Puppet Enterprise Pipeline Jenkins Puppet Enterprise Pipeline 1.3.1 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code. network low complexity jenkins critical	9.9

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.