RHCOS 4 : OpenShift Container Platform 4.5.13 jenkins (RHSA-2020:3841)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3841 advisory. - jetty: double release of resource can lead to information disclosure CVE-2019-17638 - jenkins: user-specified tooltip values leads...

org.jenkins-ci.main:jenkins-test-harness (1.532.2), org.jenkins-ci.main:jenkins-war (1.532.2) +16 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.532.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.532.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.532.2 - org.jenkins-ci.main:jenkins-war 1.532.2 -...

org.jenkins-ci.main:jenkins-test-harness (1.441), org.jenkins-ci.main:jenkins-war (1.441) +3 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.441)

org.jenkins-ci.main:jenkins-core MAVEN version 1.441 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.441 - org.jenkins-ci.main:jenkins-war 1.441 -...

org.jenkins-ci.lib:xtrigger-lib (>=0.34, <=0.35), org.jenkins-ci.main:jenkins-test-harness (1.590) +4 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.590)

org.jenkins-ci.main:jenkins-core MAVEN version 1.590 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.lib:xtrigger-lib =0.34, =3.0, =4.4 -...

org.jenkins-ci.main:jenkins-test-harness (1.623), org.jenkins-ci.main:jenkins-war (1.623) +2 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.623)

org.jenkins-ci.main:jenkins-core MAVEN version 1.623 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.623 - org.jenkins-ci.main:jenkins-war 1.623 -...

com.thalesgroup.dtkit:dtkit-metrics-hudson-api (>=0.14, <=0.14.1), com.thalesgroup.jenkins-ci.plugins:cppcheck (>=0.11, <=0.14) +29 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.397)

org.jenkins-ci.main:jenkins-core MAVEN version 1.397 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-metrics-hudson-api =0.14, =0.11, =1.5, =1.15, =0.3, =0.5.11 -...

com.thalesgroup.dtkit:dtkit-default-junit-jenkins (>=0.15, <=0.16), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (>=0.16, <=0.18) +42 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.396)

org.jenkins-ci.main:jenkins-core MAVEN version 1.396 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-default-junit-jenkins =0.15, =0.16, =0.12, =0.1, =1.0, =1.2 -...

org.jenkins-ci.main:jenkins-test-harness (1.406), org.jenkins-ci.main:jenkins-war (1.406) +7 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.406)

org.jenkins-ci.main:jenkins-core MAVEN version 1.406 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.406 - org.jenkins-ci.main:jenkins-war 1.406 -...

org.jenkins-ci.main:jenkins-test-harness (1.401), org.jenkins-ci.main:jenkins-war (1.401) +7 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.401)

org.jenkins-ci.main:jenkins-core MAVEN version 1.401 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.401 - org.jenkins-ci.main:jenkins-war 1.401 -...

org.jenkins-ci.main:jenkins-test-harness (1.408), org.jenkins-ci.main:jenkins-war (1.408) +11 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.408)

org.jenkins-ci.main:jenkins-core MAVEN version 1.408 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.408 - org.jenkins-ci.main:jenkins-war 1.408 -...

com.thalesgroup.dtkit:dtkit-default-junit-jenkins (>=0.17, <=0.19), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (>=0.20, <=0.22) +9 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.411)

org.jenkins-ci.main:jenkins-core MAVEN version 1.411 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-default-junit-jenkins =0.17, =0.20, =1.7, =1.17, =1.18 -...

com.cloudbees.jenkins.plugins:custom-tools-plugin (0.1), com.cwctravel:script-scm (1.3) +90 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.399)

org.jenkins-ci.main:jenkins-core MAVEN version 1.399 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin 0.1 - com.cwctravel:script-scm 1.3 -...

com.coravy.hudson.plugins.github:github (>=0.5, <=0.8), com.sonyericsson.hudson.plugins.gerrit:build-config (>=1.2.2, <=1.2.9) +34 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.400)

org.jenkins-ci.main:jenkins-core MAVEN version 1.400 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.coravy.hudson.plugins.github:github =0.5, =1.2.2, =1.2.2, =2.3.0, =1.4, =1.8, =1.10, =0.1.2...

com.thalesgroup.jenkins-ci.plugins:cppcheck (0.15), com.thalesgroup.jenkins-ci.plugins:xunit (1.16) +46 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.398)

org.jenkins-ci.main:jenkins-core MAVEN version 1.398 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:cppcheck 0.15 - com.thalesgroup.jenkins-ci.plugins:xunit 1.1...

com.sonyericsson.hudson.plugins.rebuild:rebuild (>=1.10, <=1.14), org.jenkins-ci.main:jenkins-test-harness (1.405) +8 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.405)

org.jenkins-ci.main:jenkins-core MAVEN version 1.405 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.rebuild:rebuild =1.10, =1.29, =0.92, =1.33, =1.43 Source cves:...

org.jenkins-ci.main:jenkins-test-harness (1.424.4), org.jenkins-ci.main:jenkins-war (1.424.4) +3 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.424.4)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.424.4 - org.jenkins-ci.main:jenkins-war 1.424.4 -...

org.jenkins-ci.main:jenkins-test-harness (1.430), org.jenkins-ci.main:jenkins-war (1.430) +6 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.430)

org.jenkins-ci.main:jenkins-core MAVEN version 1.430 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.430 - org.jenkins-ci.main:jenkins-war 1.430 -...

org.jenkins-ci.main:jenkins-test-harness (1.429), org.jenkins-ci.main:jenkins-war (1.429) +8 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.429)

org.jenkins-ci.main:jenkins-core MAVEN version 1.429 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.429 - org.jenkins-ci.main:jenkins-war 1.429 -...

org.jenkins-ci.main:jenkins-test-harness (1.453), org.jenkins-ci.main:jenkins-war (1.453) +3 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.453)

org.jenkins-ci.main:jenkins-core MAVEN version 1.453 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.453 - org.jenkins-ci.main:jenkins-war 1.453 -...

jenkins.plugins:simpleclearcase (>=1.2, <=1.2.2), org.jenkins-ci.main:jenkins-test-harness (1.452) +5 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.452)

org.jenkins-ci.main:jenkins-core MAVEN version 1.452 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jenkins.plugins:simpleclearcase =1.2, =1.2.2 - org.jenkins-ci.main:jenkins-test-harness 1.452 -...