RHCOS 4 : OpenShift Container Platform 4.5.13 jenkins (RHSA-2020:3841)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3841 advisory. - jetty: double release of resource can lead to information disclosure CVE-2019-17638 - jenkins: user-specified tooltip values leads...

org.jenkins-ci.main:jenkins-test-harness (1.552), org.jenkins-ci.main:jenkins-war (1.552) +1 more potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.552)

org.jenkins-ci.main:jenkins-core MAVEN version 1.552 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.552 - org.jenkins-ci.main:jenkins-war 1.552 -...

org.bravo5.jenkins.plugins:vertx (>=1.0.0, <=1.0.1), org.jenkins-ci.main:jenkins-test-harness (1.482) +4 more potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.482)

org.jenkins-ci.main:jenkins-core MAVEN version 1.482 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.bravo5.jenkins.plugins:vertx =1.0.0, =1.0.1 - org.jenkins-ci.main:jenkins-test-harness 1.48...

org.jenkins-ci.main:jenkins-test-harness (1.554.3.jenkins-18065-jenkins-23945), org.jenkins-ci.main:jenkins-war (1.554.3.jenkins-18065-jenkins-23945) potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.554.3.jenkins-18065-jenkins-23945)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.3.jenkins-18065-jenkins-23945 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness...

org.jenkins-ci.main:jenkins-test-harness (1.498), org.jenkins-ci.main:jenkins-war (1.498) +8 more potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.498)

org.jenkins-ci.main:jenkins-core MAVEN version 1.498 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.498 - org.jenkins-ci.main:jenkins-war 1.498 -...

net.masterthought.jenkins:cucumber-reports (>=1.3.0, <=2.5.1), org.jenkins-ci.main:jenkins-test-harness (1.577) +21 more potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.577)

org.jenkins-ci.main:jenkins-core MAVEN version 1.577 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.masterthought.jenkins:cucumber-reports =1.3.0, =2.5.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.486), org.jenkins-ci.main:jenkins-war (1.486) +4 more potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.486)

org.jenkins-ci.main:jenkins-core MAVEN version 1.486 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.486 - org.jenkins-ci.main:jenkins-war 1.486 -...

org.jenkins-ci.main:jenkins-test-harness (1.423), org.jenkins-ci.main:jenkins-war (1.423) +4 more potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.423)

org.jenkins-ci.main:jenkins-core MAVEN version 1.423 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.423 - org.jenkins-ci.main:jenkins-war 1.423 -...

org.jenkins-ci.main:jenkins-test-harness (1.642), org.jenkins-ci.main:jenkins-war (1.642) +6 more potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.642)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.642 - org.jenkins-ci.main:jenkins-war 1.642 -...

com.apica:apicaloadtest (>=1.1, <=1.10), com.infullmobile.jenkins.plugin:restricted-register (0.1.7) +4 more potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.610)

org.jenkins-ci.main:jenkins-core MAVEN version 1.610 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.apica:apicaloadtest =1.1, =1.4, =1.7.2 - org.jenkins-ci.plugins:plugin 1.610 Source cves:...

org.jenkins-ci.main:jenkins-test-harness (1.551), org.jenkins-ci.main:jenkins-war (1.551) +4 more potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.551)

org.jenkins-ci.main:jenkins-core MAVEN version 1.551 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.551 - org.jenkins-ci.main:jenkins-war 1.551 -...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +278 more potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.150.3)

org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2020-2230 Source advisory: GHSA-9G4M-FFX6-C29G...

org.jenkins-ci.main:jenkins-test-harness (1.456), org.jenkins-ci.main:jenkins-war (1.456) +6 more potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.456)

org.jenkins-ci.main:jenkins-core MAVEN version 1.456 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.456 - org.jenkins-ci.main:jenkins-war 1.456 -...

customhistory:customhistory (>=1.1, <=1.3), org.jenkins-ci.main:jenkins-test-harness (1.471) +6 more potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.471)

org.jenkins-ci.main:jenkins-core MAVEN version 1.471 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - customhistory:customhistory =1.1, =1.3 - org.jenkins-ci.main:jenkins-test-harness 1.471 -...

org.jenkins-ci.main:jenkins-test-harness (1.424.1), org.jenkins-ci.main:jenkins-war (1.424.1) +6 more potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.424.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.424.1 - org.jenkins-ci.main:jenkins-war 1.424.1 -...

org.jenkins-ci.main:jenkins-war (1.532.2.jenkins-21622-diag) potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.532.2.jenkins-21622-diag)

org.jenkins-ci.main:jenkins-core MAVEN version 1.532.2.jenkins-21622-diag is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.532.2.jenkins-21622-diag Source cves:...

com.coravy.hudson.plugins.github:github (>=0.5, <=0.8), com.sonyericsson.hudson.plugins.gerrit:build-config (>=1.2.2, <=1.2.9) +34 more potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.400)

org.jenkins-ci.main:jenkins-core MAVEN version 1.400 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.coravy.hudson.plugins.github:github =0.5, =1.2.2, =1.2.2, =2.3.0, =1.4, =1.8, =1.10, =0.1.2...

org.jenkins-ci.main:jenkins-test-harness (1.565.1.jenkins-22395-droplinks), org.jenkins-ci.main:jenkins-war (1.565.1.jenkins-22395-droplinks) potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.565.1.jenkins-22395-droplinks)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.1.jenkins-22395-droplinks is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness...

org.jenkins-ci.main:jenkins-test-harness (1.497), org.jenkins-ci.main:jenkins-war (1.497) +3 more potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.497)

org.jenkins-ci.main:jenkins-core MAVEN version 1.497 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.497 - org.jenkins-ci.main:jenkins-war 1.497 -...

com.mtvi.plateng.hudson:ldapemail (0.8), org.jenkins-ci.main:jenkins-test-harness (1.436) +7 more potentially affected by CVE-2020-2230 via org.jenkins-ci.main:jenkins-core (1.436)

org.jenkins-ci.main:jenkins-core MAVEN version 1.436 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.mtvi.plateng.hudson:ldapemail 0.8 - org.jenkins-ci.main:jenkins-test-harness 1.436 -...