Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2019:4089
HistoryDec 17, 2019 - 1:57 a.m.

(RHSA-2019:4089) Important: OpenShift Container Platform 4.1 jenkins-2-plugins security update

2019-12-1701:57:36
access.redhat.com
12

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

9.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

0.003

Percentile

68.5%

JSON

Red Hat OpenShift Container Platform is Red Hat’s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

Security Fix(es):

  • jenkins-script-security: Sandbox bypass vulnerability in Script Security Plugin (CVE-2019-10431)

  • jenkins-2-plugins: Stored XSS vulnerability in HTML Publisher Plugin (CVE-2019-10432)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7noarchjenkins-2-plugins< 4.1.1574872364-1.el7jenkins-2-plugins-4.1.1574872364-1.el7.noarch.rpm

Related

redhat 2
nessus 3
osv 12
cve 6
nvd 6
prion 6
github 6
cvelist 6
redhatcve 6
redhat
redhat
(RHSA-2019:4097) Important: OpenShift Container Platform 4.2 jenkins-2-plugins security update
2019-12-11 08:22:41
(RHSA-2019:4055) Important: OpenShift Container Platform 3.11 jenkins-2-plugins security update
2019-12-16 13:47:57
nessus
nessus
RHEL 7 : OpenShift Container Platform 4.2 jenkins-2-plugins (RHSA-2019:4097)
2019-12-12 00:00:00
RHEL 7 : OpenShift Container Platform 3.11 jenkins-2-plugins (RHSA-2019:4055)
2019-12-18 00:00:00
RHEL 7 : OpenShift Container Platform 4.1 jenkins-2-plugins (RHSA-2019:4089)
2019-12-18 00:00:00
osv
osv
CVE-2019-10399
2019-09-12 14:15:11
CVE-2019-10394
2019-09-12 14:15:11
Sandbox bypass vulnerability in Jenkins Script Security Plugin
2022-05-24 16:55:59
cve
cve
CVE-2019-10399
2019-09-12 14:15:11
CVE-2019-10431
2019-10-01 14:15:18
CVE-2019-10394
2019-09-12 14:15:11
nvd
nvd
CVE-2019-10399
2019-09-12 14:15:11
CVE-2019-10432
2019-10-01 14:15:23
CVE-2019-10394
2019-09-12 14:15:11
prion
prion
Security feature bypass
2019-09-12 14:15:00
Security feature bypass
2019-09-12 14:15:00
Security feature bypass
2019-09-12 14:15:00
github
github
Jenkins HTML Publisher Plugin vulnerable to Cross-site Scripting
2022-05-24 16:57:28
Improper Control of Generation of Code in Jenkins Script Security Plugin
2022-05-24 16:57:28
Sandbox bypass vulnerability in Jenkins Script Security Plugin
2022-05-24 16:55:59
cvelist
cvelist
CVE-2019-10394
2019-09-12 13:55:15
CVE-2019-10431
2019-10-01 13:45:19
CVE-2019-10400
2019-09-12 13:55:15
redhatcve
redhatcve
CVE-2019-10394
2020-04-01 11:01:35
CVE-2019-10400
2020-04-01 11:31:21
CVE-2019-10399
2020-04-01 11:31:21

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

9.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

0.003

Percentile

68.5%

JSON
Related for RHSA-2019:4089
redhat2nessus3osv12cve6nvd6prion6github6cvelist6redhatcve6