17 matches found
org.jenkins-ci.plugins.workflow:workflow-aggregator (1.4.3-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.4.3-beta-1) potentially affected by CVE-2020-2109 via org.jenkins-ci.plugins.workflow:workflow-cps (1.4.3-beta-1)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.4.3-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.4.3-beta-1...
org.jenkins-ci.plugins.workflow:workflow-aggregator (1.7), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.7) +2 more potentially affected by CVE-2020-2109 via org.jenkins-ci.plugins.workflow:workflow-cps (1.7)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.7 -...
org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-7), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (0.1-beta-7) potentially affected by CVE-2020-2109 via org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-7)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 0.1-beta-7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 0.1-beta-7 -...
org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11-beta-4), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11-beta-4) potentially affected by CVE-2020-2109 via org.jenkins-ci.plugins.workflow:workflow-cps (1.11-beta-4)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.11-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.11-beta-4 -...
org.jenkins-ci.plugins.workflow:workflow-aggregator (1.12-beta-3), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.12-beta-3) +1 more potentially affected by CVE-2020-2109 via org.jenkins-ci.plugins.workflow:workflow-cps (1.12-beta-3)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.12-beta-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.12-beta-3 -...
org.jenkins-ci.plugins.workflow:workflow-aggregator (1.5), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.5) +1 more potentially affected by CVE-2020-2109 via org.jenkins-ci.plugins.workflow:workflow-cps (1.5)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.5 -...
org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-1) potentially affected by CVE-2020-2109 via org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-1)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 0.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 0.1-beta-1...
io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-devops-steps (1.3) +4 more potentially affected by CVE-2020-2109 via org.jenkins-ci.plugins.workflow:workflow-cps (1.7-alpha-1)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.7-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...
org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-4) potentially affected by CVE-2020-2109 via org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-4)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 0.1-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 0.1-beta-4...
org.jenkins-ci.plugins.pipeline-stage-view:parent-pom (>=1.0-alpha-1, <=1.0-alpha-2), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.0-alpha-1, <=1.0-alpha-2) +4 more potentially affected by CVE-2020-2109 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14-beta-1)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.pipeline-stage-view:parent-pom =1.0-alpha-...
org.jenkins-ci.plugins.workflow:workflow-aggregator (1.2), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.2) potentially affected by CVE-2020-2109 via org.jenkins-ci.plugins.workflow:workflow-cps (1.2)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.2 -...
org.jenkins-ci.plugins.workflow:workflow-aggregator (1.0-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.0-beta-1) potentially affected by CVE-2020-2109 via org.jenkins-ci.plugins.workflow:workflow-cps (1.0-beta-1)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.0-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.0-beta-1 -...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.3.35 jenkins-2-plugins security update
An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.4.z jenkins-2-plugins security update
An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
RHEL 7 : OpenShift Container Platform 4.4.z jenkins-2-plugins (RHSA-2020:2737)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2737 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...
CVE-2020-2109
CVE-2020-2109 is corroborated by the GHSA entry for Jenkins Pipeline: Groovy Plugin. The vulnerability concerns sandbox protection bypass via default parameter expressions in CPS-transformed methods, affecting Jenkins Pipeline: Groovy Plugin versions 2.78 and earlier. The connected documents iden...
