Lucene search

(RHSA-2023:3198) Critical: jenkins and jenkins-2-plugins security update

🗓️ 17 May 2023 17:13:46Reported by RedHatType

Critical security update for Jenkins and Jenkins-2-plugins. Fixes multiple vulnerabilities including RCE, sandbox bypass, CSRF, and more.

Reporter	Title	Published	Views	Family All 199
Tenable Nessus	RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2023:3198)	28 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2023:3195)	28 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat Product OCP Tools 4.12 Openshift Jenkins (RHSA-2023:6172)	28 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : OpenShift Developer Tools and Services for OCP 4.12 (RHSA-2023:1064)	28 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat Product OCP Tools 4.11 Openshift Jenkins (RHSA-2023:6171)	28 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2024:0775)	29 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : OpenShift Container Platform 4.9.56 (RHSA-2023:0777)	23 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat Product OCP Tools 4.14 Openshift Jenkins (RHSA-2023:7288)	23 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2024:0776)	28 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat Product OCP Tools 4.13 OpenShift Jenkins (RHSA-2023:6179)	28 Apr 202400:00	–	nessus

Vulners

Node

redhat jenkins-0Range≤2.387.1.1683009767-3.el8

redhat jenkins-0Range≤2.414.3.1698293911-3.el8

redhat jenkins-0Range≤2.426.3.1706515686-3.el8

redhat jenkins-0Range≤2.401.1.1686680404-3.el8

redhat jenkins-0Range≤2.387.1.1683009763-3.el8

redhat jenkins-0Range≤2.401.1.1686831596-3.el8

redhat jenkins-0Range≤2.414.3.1698298955-3.el8

redhat jenkins-0Range≤2.426.3.1706516929-3.el8

redhat jenkins-0Range≤2.387.1.1680701869-1.el8

redhat jenkins-0Range≤2.387.3.1684911776-3.el8

redhat jenkins-2-plugins-0Range≤4.12.1675702407-1.el8

redhat jenkins-2-plugins-0Range≤4.11.1683009941-1.el8

redhat jenkins-2-plugins-0Range≤4.10.1675144701-1.el8

redhat jenkins-2-plugins-0Range≤4.9.1675668922-1.el8

redhat jenkins-2-plugins-0Range≤4.12.1683009955-1.el8

redhat jenkins-2-plugins-0Range≤4.12.1698294000-1.el8

redhat jenkins-2-plugins-0Range≤4.12.1706515741-1.el8

redhat jenkins-2-plugins-0Range≤4.13.1684911916-1.el8

redhat jenkins-2-plugins-0Range≤4.13.1698292274-1.el8

redhat jenkins-2-plugins-0Range≤4.13.1706516346-1.el8

redhat jenkins-2-plugins-0Range≤4.14.1699356715-1.el8

redhat jenkins-2-plugins-0Range≤4.14.1706516441-1.el8

redhat jenkins-2-plugins-0Range≤4.11.1698299029-1.el8

redhat jenkins-2-plugins-0Range≤4.11.1706516946-1.el8

redhat jenkins-2-plugins-0Range≤4.10.1681719745-1.el8

redhat jenkins-2-plugins-0Range≤4.12.1686649756-1.el8

redhat jenkins-2-plugins-0Range≤4.13.1686680473-1.el8

redhat jenkins-2-plugins-0Range≤4.8.1672842762-1.el8

redhat prometheus-jmx-exporterRange≤0.12.0-8.el8_6

redhat eap7-snakeyaml-0Range≤1.31.0-1.redhat_00001.1.el8eap

redhat eap7-snakeyaml-0Range≤1.31.0-1.redhat_00001.1.el9eap

redhat eap7-snakeyaml-0Range≤1.31.0-1.redhat_00001.1.el7eap

redhat candlepin-0Range≤4.2.13-1.el8sat

redhat keycloakRange≤18.0.6-1.redhat_00001.1.el7sso

redhat keycloakRange≤18.0.6-1.redhat_00001.1.el8sso

redhat keycloakRange≤18.0.6-1.redhat_00001.1.el9sso

redhat openshiftRange≤7.6-20

redhat jenkins-2-plugins-0Range≤4.10.1680703106-1.el8

redhat prometheus-jmx-exporterRange≤0.12.0-9.el8_7

redhat eap7-snakeyaml-0Range≤1.33.0-2.SP1_redhat_00001.1.el8eap

redhat eap7-snakeyaml-0Range≤1.33.0-2.SP1_redhat_00001.1.el9eap

redhat eap7-snakeyaml-0Range≤1.33.0-2.SP1_redhat_00001.1.el7eap

redhat jenkins-2-plugins-0Range≤4.10.1675407676-1.el8

redhat openjdk\/openjdk-11-rhel7Range≤1.17-1

redhat openshiftRange≤1.17-1

redhat ubi8\/openjdk-11Range≤1.14-11

redhat ubi8\/openjdk-11-runtimeRange≤1.14-11

redhat ubi8\/openjdk-17Range≤1.14-9

redhat ubi8\/openjdk-17-runtimeRange≤1.14-8

redhat ubi8\/openjdk-8Range≤1.14-12

redhat ubi8\/openjdk-8-runtimeRange≤1.14-10

redhat maven-shared-utilsRange≤0.4-4.el7_9

redhat mavenRange≤3.6-8060020220428115217.32bfc089

redhat mavenRange≤3.5-8060020220428102527.219351c9

redhat mavenRange≤3.5-8010020220428105208.6ece90b1

redhat mavenRange≤3.6-8020020220428113059.6f73a675

redhat mavenRange≤3.5-8020020220428105255.1f11a1d9

redhat mavenRange≤3.6-8040020220428113925.2bbcd66f

redhat mavenRange≤3.5-8040020220428105311.b9dd3217

redhat jenkins-2-plugins-0Range≤4.10.1670851835-1.el8

redhat jenkins-2-plugins-0Range≤4.9.1674644684-1.el8

redhat rh-maven36-maven-shared-utils-0Range≤3.2.1-0.2.3.el7

redhat jenkins-2-plugins-0Range≤4.9.1680069756-1.el8

redhat candlepin-0Range≤4.1.18-1.el8sat

redhat eap7-apache-sshd-0Range≤2.9.2-1.redhat_00001.1.el8eap

redhat eap7-apache-sshd-0Range≤2.9.2-1.redhat_00001.1.el9eap

redhat eap7-apache-sshd-0Range≤2.9.2-1.redhat_00001.1.el7eap

redhat vdsm-0Range≤4.50.3.6-1.el8ev

redhat apache-sshd-1Range≤2.9.2-0.1.el8ev

AND

redhat enterprise_linuxMatch8

redhat enterprise_linuxMatch7

OS	OS Version	Architecture	Package	Package Version	Filename
RedHat	8	noarch	jenkins-2-plugins	4.11.1683009941-1.el8	jenkins-2-plugins-4.11.1683009941-1.el8.noarch.rpm
RedHat	8	noarch	jenkins	2.387.1.1683009763-3.el8	jenkins-2.387.1.1683009763-3.el8.noarch.rpm

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 May 2023 17:46Current

7.8High risk

Vulners AI Score7.8

CVSS39.9

EPSS0.972

CWE-693