Jenkins Enterprise and Operations Center 2.277.x < 2.277.43.0.6 / 2.303.x < 2.303.30.0.5 / 2.319.3.3 Multiple DoS (CloudBees Security Advisory 2022-02-09)

The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.277.x prior to 2.277.43.0.6, 2.303.x prior to 2.303.30.0.5, or 2.x prior to 2.319.3.3. It is, therefore, affected by multiple vulnerabilities: - XStream is an open source java library to serialize...

org.jenkins-ci.main:jenkins-test-harness (1.580.2), org.jenkins-ci.main:jenkins-war (1.580.2) +3 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.580.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.580.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.580.2 - org.jenkins-ci.main:jenkins-war 1.580.2 -...

org.jenkins-ci.main:jenkins-test-harness (1.487), org.jenkins-ci.main:jenkins-war (1.487) +3 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.487)

org.jenkins-ci.main:jenkins-core MAVEN version 1.487 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.487 - org.jenkins-ci.main:jenkins-war 1.487 -...

com.nirima.jenkins.repository:jenkins-maven-plugin (1.0), com.nirima.jenkins.repository:pom (1.0) +10 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.499)

org.jenkins-ci.main:jenkins-core MAVEN version 1.499 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima.jenkins.repository:jenkins-maven-plugin 1.0 - com.nirima.jenkins.repository:pom 1.0 ...

org.jenkins-ci.main:jenkins-test-harness (1.424.5), org.jenkins-ci.main:jenkins-war (1.424.5) +3 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.424.5)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.424.5 - org.jenkins-ci.main:jenkins-war 1.424.5 -...

net.praqma:memory-map (>=0.1.0, <=0.1.2), org.jenkins-ci.main:jenkins-test-harness (1.484) +7 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.484)

org.jenkins-ci.main:jenkins-core MAVEN version 1.484 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:memory-map =0.1.0, =0.36, =0.37 - org.jenkins-ci.plugins:viewvc 1.7 Source cves:...

org.jenkins-ci.main:jenkins-test-harness (1.438), org.jenkins-ci.main:jenkins-war (1.438) +6 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.438)

org.jenkins-ci.main:jenkins-core MAVEN version 1.438 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.438 - org.jenkins-ci.main:jenkins-war 1.438 -...

org.jenkins-ci.main:jenkins-test-harness (1.606), org.jenkins-ci.main:jenkins-war (1.606) +1 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.606)

org.jenkins-ci.main:jenkins-core MAVEN version 1.606 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.606 - org.jenkins-ci.main:jenkins-war 1.606 -...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.4), biz.neustar.jenkins.plugins:packer (1.5) +341 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.625.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin 0.0.4 -...

jp.shiftinc.jenkins.plugins:discard-old-build (>=1.04, <=1.05), org.jenkins-ci.main:jenkins-test-harness (1.515) +6 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.515)

org.jenkins-ci.main:jenkins-core MAVEN version 1.515 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jp.shiftinc.jenkins.plugins:discard-old-build =1.04, =1.05 -...

com.zenika.jenkins-ci.plugins:gradle (1.12), org.jenkins-ci.main:jenkins-test-harness (1.409) +70 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.409)

org.jenkins-ci.main:jenkins-core MAVEN version 1.409 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.zenika.jenkins-ci.plugins:gradle 1.12 - org.jenkins-ci.main:jenkins-test-harness 1.409 -...

org.jenkins-ci.main:jenkins-test-harness (1.419), org.jenkins-ci.main:jenkins-war (1.419) +4 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.419)

org.jenkins-ci.main:jenkins-core MAVEN version 1.419 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.419 - org.jenkins-ci.main:jenkins-war 1.419 -...

org.jenkins-ci.main:jenkins-war (1.654), org.jenkins-ci.main:test (1.654) potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.654)

org.jenkins-ci.main:jenkins-core MAVEN version 1.654 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.654 - org.jenkins-ci.main:test 1.654 Source cves: CVE-2022-05...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.3.7, <=0.3.15), com.cloudbees.jenkins.plugins:amazon-ecr (1.6) +27 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.642.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.3.7, =2.0.0, =1.0, =1.3.1, =1.6.0...

org.jenkins-ci.main:jenkins-test-harness (1.422), org.jenkins-ci.main:jenkins-war (1.422) +3 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.422)

org.jenkins-ci.main:jenkins-core MAVEN version 1.422 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.422 - org.jenkins-ci.main:jenkins-war 1.422 -...

org.jenkins-ci.main:jenkins-test-harness (1.412), org.jenkins-ci.main:jenkins-war (1.412) +5 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.412)

org.jenkins-ci.main:jenkins-core MAVEN version 1.412 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.412 - org.jenkins-ci.main:jenkins-war 1.412 -...

com.parallels:parallels-desktop (>=0.4, <=0.6), org.fedoraproject.jenkins.plugins:copr (0.6.1) +7 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.651.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.parallels:parallels-desktop =0.4, =1.6, =0.7.0, =0.8.1 Source cves: CVE-2022-0538 Source...

com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin (1.0.0), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (0.19) +14 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.404)

org.jenkins-ci.main:jenkins-core MAVEN version 1.404 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin 1.0.0 -...

org.jenkins-ci.main:jenkins-test-harness (1.443), org.jenkins-ci.main:jenkins-war (1.443) +4 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.443)

org.jenkins-ci.main:jenkins-core MAVEN version 1.443 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.443 - org.jenkins-ci.main:jenkins-war 1.443 -...

org.jenkins-ci.main:jenkins-test-harness (1.510), org.jenkins-ci.main:jenkins-war (1.510) +4 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.510)

org.jenkins-ci.main:jenkins-core MAVEN version 1.510 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.510 - org.jenkins-ci.main:jenkins-war 1.510 -...