Lucene search

K
redhatRedHatRHSA-2019:2548
HistoryAug 28, 2019 - 4:57 p.m.

(RHSA-2019:2548) Important: OpenShift Container Platform 4.1 jenkins security update

2019-08-2816:57:18
access.redhat.com
39

0.528 Medium

EPSS

Percentile

97.6%

Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cron.

Security Fix(es):

  • jenkins: CSRF protection tokens did not expire (CVE-2019-10353)

  • jenkins: Arbitrary file write vulnerability using file parameter definitions (CVE-2019-10352)

  • jenkins: Unauthorized view fragment access (CVE-2019-10354)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7noarchjenkins< 2.176.2.1563461785-1.el7jenkins-2.176.2.1563461785-1.el7.noarch.rpm