RHEL 8 : OpenShift Container Platform 4.6.55 (RHSA-2022:0565)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0565 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

Important: Red Hat Security Advisory: OpenShift Container Platform 3.11.634 security update

Red Hat OpenShift Container Platform release 3.11.634 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score,...

RHEL 7 : OpenShift Container Platform 3.11.634 (RHSA-2022:0555)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0555 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.8.31 security update

Red Hat OpenShift Container Platform release 4.8.31 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.8. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.9.19 security update

Red Hat OpenShift Container Platform release 4.9.19 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.9. Red Hat Product Security has rated this update as having a...

RHEL 8 : OpenShift Container Platform 4.9.19 (RHSA-2022:0339)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0339 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

CVE-2022-20612

A Cross-site request forgery CSRF vulnerability was found in Jenkins. The POST requests are not required for the HTTP endpoint handling manual build requests when no security realm is set. This flaw allows an attacker to trigger the building of a job without parameters...

org.jenkins-ci.main:jenkins-test-harness (1.424.1), org.jenkins-ci.main:jenkins-war (1.424.1) +6 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.424.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.424.1 - org.jenkins-ci.main:jenkins-war 1.424.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.565.1), org.jenkins-ci.main:jenkins-war (1.565.1) +10 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.565.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.1 - org.jenkins-ci.main:jenkins-war 1.565.1 -...

com.github.bogdanlivadariu:bootstraped-multi-test-results-report (>=1.3.5, <=1.4.24), org.jenkins-ci.main:jenkins-test-harness (1.602) +2 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.602)

org.jenkins-ci.main:jenkins-core MAVEN version 1.602 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.bogdanlivadariu:bootstraped-multi-test-results-report =1.3.5, =1.4.24 -...

com.blazemeter.plugins:blazemeterjenkinsplugin (>=1.0-beta-1, <=1.08-beta-1), com.brianfromoregon:caliper-ci (2.1) +153 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.424)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.blazemeter.plugins:blazemeterjenkinsplugin =1.0-beta-1, =0.1, =0.9, =1.2.11, =1.4.0, =2.7.0...

org.jenkins-ci.main:jenkins-test-harness (1.561), org.jenkins-ci.main:jenkins-war (1.561) +2 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.561)

org.jenkins-ci.main:jenkins-core MAVEN version 1.561 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.561 - org.jenkins-ci.main:jenkins-war 1.561 -...

columnpack:columnpack-plugin (1.0.3), com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.0, <=1.6.3) +115 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.466)

org.jenkins-ci.main:jenkins-core MAVEN version 1.466 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - columnpack:columnpack-plugin 1.0.3 -...

org.jenkins-ci.main:jenkins-test-harness (1.633), org.jenkins-ci.main:jenkins-war (1.633) +1 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.633)

org.jenkins-ci.main:jenkins-core MAVEN version 1.633 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.633 - org.jenkins-ci.main:jenkins-war 1.633 -...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.castlemon.hudson:cucumber-perf (2.0.9), com.checkmarx.jenkins:checkmarx (>=8.5.0, <=8.90.4) +10 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.579)

org.jenkins-ci.main:jenkins-core MAVEN version 1.579 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.castlemon.hudson:cucumber-perf 2.0.9 - com.checkmarx.jenkins:checkmarx =8.5.0, =1.1, =2.1,...

org.jenkins-ci.main:jenkins-test-harness (1.592), org.jenkins-ci.main:jenkins-war (1.592) +2 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.592)

org.jenkins-ci.main:jenkins-core MAVEN version 1.592 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.592 - org.jenkins-ci.main:jenkins-war 1.592 -...

com.deepshiftlabs.nerrvana:nerrvana-plugin (>=1.02.03, <=1.02.05), net.praqma:drmemory-plugin (>=0.1.0, <=0.1.1) +11 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.450)

org.jenkins-ci.main:jenkins-core MAVEN version 1.450 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.deepshiftlabs.nerrvana:nerrvana-plugin =1.02.03, =0.1.0, =1.0, =0.3, =1.02r, =1.10, =1.3,...

org.jenkins-ci.main:jenkins-war (1.649), org.jenkins-ci.main:test (1.649) potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.649)

org.jenkins-ci.main:jenkins-core MAVEN version 1.649 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.649 - org.jenkins-ci.main:test 1.649 Source cves:...

net.masterthought.jenkins:cucumber-reports (>=1.3.0, <=2.5.1), org.jenkins-ci.main:jenkins-test-harness (1.577) +21 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.577)

org.jenkins-ci.main:jenkins-core MAVEN version 1.577 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.masterthought.jenkins:cucumber-reports =1.3.0, =2.5.1 -...