CVE:CVE-2019-1003002
CNNVD:CNNVD-201901-779
Jenkins Pipeline是一套插件，支持将持续交付管道实施和集成到 Jenkins 中。
CloudBees Pipeline: Declarative Plugin 1.3.3及之前版本中的pipeline-model-definition/src/main/groovy/org/jenkinsci/plugins/pipeline/modeldefinition/parser/Converter.groovy文件存在安全漏洞。该漏洞允许具有Overall/Read权限的攻击者向HTTP端点提供脚本，从而导致执行任意代码。
solution:Upgrade jenkins pipeline to a higher version than _declarative,and avoid the version _declarative; Upgrade redhat openshift_container_platform to a higher version than 3.11,and avoid the version 3.11