RHCOS 4 : OpenShift Container Platform 4.9.9 (RHSA-2021:4833)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4833 advisory. - jenkins: FilePathmkdirs does not check permission to create parent directories CVE-2021-21685 - jenkins: File path filters do not...

org.jenkins-ci.main:jenkins-test-harness (1.627), org.jenkins-ci.main:jenkins-war (1.627) +2 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.627)

org.jenkins-ci.main:jenkins-core MAVEN version 1.627 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.627 - org.jenkins-ci.main:jenkins-war 1.627 -...

com.buildcoin.plugins.jenkins:buildcoin-plugin (>=1.0, <=1.4), hudson.plugins.memegen:memegen (>=0.3.2, <=0.5.1) +9 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.428)

org.jenkins-ci.main:jenkins-core MAVEN version 1.428 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.buildcoin.plugins.jenkins:buildcoin-plugin =1.0, =0.3.2, =pppppppppppppppppppp, =2.0.5,...

com.thalesgroup.jenkins-ci.plugins:cppcheck (0.15), com.thalesgroup.jenkins-ci.plugins:xunit (1.16) +46 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.398)

org.jenkins-ci.main:jenkins-core MAVEN version 1.398 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:cppcheck 0.15 - com.thalesgroup.jenkins-ci.plugins:xunit 1.1...

com.cisco.step.jenkins.plugins:jenkow-parent (0.1), org.jenkins-ci.main:jenkins-test-harness (1.455) +9 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.455)

org.jenkins-ci.main:jenkins-core MAVEN version 1.455 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cisco.step.jenkins.plugins:jenkow-parent 0.1 - org.jenkins-ci.main:jenkins-test-harness 1.4...

org.jenkins-ci.main:jenkins-test-harness (1.480.1), org.jenkins-ci.main:jenkins-war (1.480.1) +2 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.480.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.480.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.480.1 - org.jenkins-ci.main:jenkins-war 1.480.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.584), org.jenkins-ci.main:jenkins-war (1.584) +1 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.584)

org.jenkins-ci.main:jenkins-core MAVEN version 1.584 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.584 - org.jenkins-ci.main:jenkins-war 1.584 -...

org.jenkins-ci.main:jenkins-test-harness (1.643), org.jenkins-ci.main:jenkins-war (1.643) +1 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.643)

org.jenkins-ci.main:jenkins-core MAVEN version 1.643 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.643 - org.jenkins-ci.main:jenkins-war 1.643 -...

org.jenkins-ci.main:jenkins-test-harness (1.468), org.jenkins-ci.main:jenkins-war (1.468) +7 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.468)

org.jenkins-ci.main:jenkins-core MAVEN version 1.468 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.468 - org.jenkins-ci.main:jenkins-war 1.468 -...

com.github.bogdanlivadariu:bootstraped-multi-test-results-report (>=1.0.0, <=1.3.4), org.jenkins-ci.main:jenkins-test-harness (1.616) +2 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.616)

org.jenkins-ci.main:jenkins-core MAVEN version 1.616 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.bogdanlivadariu:bootstraped-multi-test-results-report =1.0.0, =1.3.4 -...

com.nirima:docker-plugin (>=0.3.4, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.557) +9 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.557)

org.jenkins-ci.main:jenkins-core MAVEN version 1.557 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima:docker-plugin =0.3.4, =1.8.3, =1.2, =1.0, =0.4.5, =0.4.6 Source cves: CVE-2021-21685...

com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.642.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...

com.synopsys.arc.jenkinsci.plugins:job-restrictions (>=0.1, <=0.3), com.synopsys.jenkinsci:ownership (>=0.3, <=0.4) +27 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.509.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.synopsys.arc.jenkinsci.plugins:job-restrictions =0.1, =0.3, =1.2, =1.3, =1.1, =1.4, =4.1....

org.jenkins-ci.main:jenkins-test-harness (1.554.3.jenkins-18065-jenkins-23945), org.jenkins-ci.main:jenkins-war (1.554.3.jenkins-18065-jenkins-23945) potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.554.3.jenkins-18065-jenkins-23945)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.3.jenkins-18065-jenkins-23945 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness...

org.jenkins-ci.main:jenkins-test-harness (1.552), org.jenkins-ci.main:jenkins-war (1.552) +1 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.552)

org.jenkins-ci.main:jenkins-core MAVEN version 1.552 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.552 - org.jenkins-ci.main:jenkins-war 1.552 -...

com.cloudbees.jenkins.plugins:additional-identities-plugin (1.0), com.cloudbees.plugins:build-flow-plugin (>=0.10, <=0.17) +85 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.480)

org.jenkins-ci.main:jenkins-core MAVEN version 1.480 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:additional-identities-plugin 1.0 -...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +278 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.150.3)

org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2021-21685 Source advisory:...

com.thalesgroup.dtkit:dtkit-default-junit-jenkins (>=0.15, <=0.16), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (>=0.16, <=0.18) +42 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.396)

org.jenkins-ci.main:jenkins-core MAVEN version 1.396 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-default-junit-jenkins =0.15, =0.16, =0.12, =0.1, =1.0, =1.2 -...

org.jenkins-ci.main:jenkins-test-harness (1.642), org.jenkins-ci.main:jenkins-war (1.642) +6 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.642)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.642 - org.jenkins-ci.main:jenkins-war 1.642 -...

org.jenkins-ci.main:jenkins-test-harness (1.592), org.jenkins-ci.main:jenkins-war (1.592) +2 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.592)

org.jenkins-ci.main:jenkins-core MAVEN version 1.592 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.592 - org.jenkins-ci.main:jenkins-war 1.592 -...