description: Jenkins Puppet Enterprise Pipeline 1.3.1 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code.
affected:
{
product: Jenkins Puppet Enterprise Pipeline
vendor: Jenkins project
versions:
status: affected, version: 1.3.1 and earlier
}