RHEL 7 / 8 : OpenShift Container Platform 4.7.13 (RHSA-2021:2122)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2122 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

org.jenkins-ci.plugins:pipeline-maven (>=0.5, <=2.2.1), org.jenkins-ci.plugins:pipeline-multibranch-defaults (1.1) +1 more potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.15.1)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:pipeline-maven =0.5, =0.9.0, =0.9.1 Source cves:...

org.jenkins-ci.plugins:pipeline-maven (>=2.3.0-beta-1, <=2.5.2) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.15.7)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:pipeline-maven =2.3.0-beta-1, =2.5.2 Source cves:...

org.jenkinsci.plugins:managed-scripts (>=0.0.1, <=0.2.0) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (1.2)

org.jenkins-ci.plugins:config-file-provider MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkinsci.plugins:managed-scripts =0.0.1, =0.2.0 Source cves:...

org.jenkinsci.plugins:managed-scripts (1.4) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.16.3)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkinsci.plugins:managed-scripts 1.4 Source cves: CVE-2021-21643...

org.jenkins-ci.plugins:ivy (>=1.27, <=2.2), org.jenkinsci.plugins:managed-scripts (1.3) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.15)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:ivy =1.27, =2.2 -...

org.jenkins-ci.plugins:jclouds-jenkins (>=2.11, <=2.13), org.jenkinsci.plugins:managed-scripts (1.2.4) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.13)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:jclouds-jenkins =2.11, =2.13 -...

org.jenkins-ci.plugins:jclouds-jenkins (>=2.14, <=2.22) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.15.6)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:jclouds-jenkins =2.14, =2.22 Source cves:...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.5.41 security update

Red Hat OpenShift Container Platform release 4.5.41 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, whic...

RHEL 7 : OpenShift Container Platform 4.5.41 (RHSA-2021:2431)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2431 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.7.13 packages and security update

Red Hat OpenShift Container Platform release 4.7.13 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.7. Red Hat Product Security has rated this update as having a security impact of...

com.lookout.jenkins:environment-script (1.2.5), org.jenkins-ci.plugins:ivy (>=1.23, <=2.2) +9 more potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (>=1.2, <=2.16.4)

org.jenkins-ci.plugins:config-file-provider MAVEN version =1.2, =1.23, =2.11, =1.25, =1.0, =1.5, =0.1-beta, =1.0, =0.9.0, =0.0.1, =1.4 Source cves: CVE-2021-21643 Source advisory: MEND:CVE-2021-21643...

CVE-2021-21643

CVE-2021-21643 affects Jenkins Config File Provider Plugin (version 3.7.0 and earlier). The vulnerability arises because the plugin does not correctly perform permission checks on several HTTP endpoints, allowing attackers who have global Job/Configure permission to enumerate system-scoped creden...