Lucene search

K
redhatRedHatRHSA-2019:2662
HistorySep 11, 2019 - 5:09 a.m.

(RHSA-2019:2662) Important: Red Hat OpenShift Container Platform 4.1 jenkins-2-plugins security update

2019-09-1105:09:07
access.redhat.com
109

0.004 Low

EPSS

Percentile

72.4%

Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cron.

Security Fix(es):

  • jenkins-plugin-script-security: Sandbox bypass through type casts in Script Security Plugin (CVE-2019-10355)
  • jenkins-plugin-script-security: Sandbox bypass through method pointer expressions in Script Security Plugin (CVE-2019-10356)
  • jenkins-plugin-workflow-cps-global-lib: Missing permission check in Pipeline: Shared Groovy Libraries Plugin (CVE-2019-10357)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7noarchjenkins-2-plugins< 4.1.1567707934-1.el7jenkins-2-plugins-4.1.1567707934-1.el7.noarch.rpm

0.004 Low

EPSS

Percentile

72.4%