RHEL 8 : OpenShift Container Platform 4.9.56 (RHSA-2023:0777)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0777 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

CVE-2022-36883

A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.2.0-beta-1), org.jenkins-ci.plugins:github-branch-source (2.2.0-beta-1) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (3.4.0-beta-1)

org.jenkins-ci.plugins:git MAVEN version 3.4.0-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source 2.2.0-beta-1 -...

org.jenkins-ci.plugins:gitlab-plugin (>=1.1.6, <=1.1.28), org.jenkins-ci.plugins:salesforce-migration-assistant-plugin (>=2.2.0, <=2.2.2) +1 more potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (2.3.1)

org.jenkins-ci.plugins:git MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:gitlab-plugin =1.1.6, =2.2.0, =1.3.0, =1.3.1 Source cves: CVE-2022-36883 Source...

org.jenkins-ci.plugins:github-branch-source (2.2.0-beta-2) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (3.4.0-beta-2)

org.jenkins-ci.plugins:git MAVEN version 3.4.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:github-branch-source 2.2.0-beta-2 Source cves: CVE-2022-36883 Source advisory...

org.jenkins-ci.plugins:flaky-test-handler (>=1.0.0, <=1.0.4) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (2.2.2)

org.jenkins-ci.plugins:git MAVEN version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:flaky-test-handler =1.0.0, =1.0.4 Source cves: CVE-2022-36883 Source advisory:...

org.jenkins-ci.plugins:jira-ext (>=0.1, <=0.9) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (2.2.3)

org.jenkins-ci.plugins:git MAVEN version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:jira-ext =0.1, =0.9 Source cves: CVE-2022-36883 Source advisory:...

com.coravy.hudson.plugins.github:github (>=1.9, <=1.13.3), com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9, <=4.1.0) +4 more potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (2.0)

org.jenkins-ci.plugins:git MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.coravy.hudson.plugins.github:github =1.9, =4.0.9, =0.9.14, =1.8, =1.4.0, =1.4.2 Source cves: CVE-2022-368...

org.jenkins-ci.plugins:fitnesse (>=1.12, <=1.13), org.jenkins-ci.plugins:gitbucket (>=0.1, <=0.4) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (1.5.0)

org.jenkins-ci.plugins:git MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:fitnesse =1.12, =0.1, =0.4 Source cves: CVE-2022-36883 Source advisory:...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31), org.jenkins-ci.plugins:bitbucket (>=1.1.2, <=1.1.13) +4 more potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (2.3.5)

org.jenkins-ci.plugins:git MAVEN version 2.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =1.1.2, =1.3, =0.1, =1.0.0, =1.6.8, =1.6.11 Source cves:...

org.jenkins-ci.plugins:pipeline-github-lib (1.0) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (3.0.2)

org.jenkins-ci.plugins:git MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:pipeline-github-lib 1.0 Source cves: CVE-2022-36883 Source advisory:...

org.jenkins-ci.plugins:pipeline-dependency-walker (1.0.0) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (3.0.1)

org.jenkins-ci.plugins:git MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:pipeline-dependency-walker 1.0.0 Source cves: CVE-2022-36883 Source advisory:...

io.jenkins.blueocean:blueocean (1.1.0-beta-1), io.jenkins.blueocean:blueocean-events (1.1.0-beta-1) +3 more potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (3.2.0)

org.jenkins-ci.plugins:git MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - io.jenkins.blueocean:blueocean 1.1.0-beta-1 - io.jenkins.blueocean:blueocean-events 1.1.0-beta-1 -...

com.amcbridge:build-configurator (>=1.0.5.0, <=1.0.6.1), com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9) +12 more potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (2.4.2)

org.jenkins-ci.plugins:git MAVEN version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.amcbridge:build-configurator =1.0.5.0, =1.9.2-beta, =1.0.22, =0.0.8, =1.0-alpha-1, =1.0-alpha-1,...

org.jenkins-ci.plugins:ghprb (>=1.40.0, <=1.42.2) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (3.3.1)

org.jenkins-ci.plugins:git MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:ghprb =1.40.0, =1.42.2 Source cves: CVE-2022-36883 Source advisory:...

com.groupon.jenkins-ci.plugins:dotci (>=1.1.0, <=2.27.0), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +7 more potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (2.0.3)

org.jenkins-ci.plugins:git MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.1.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.1.0, =1.0.0, =1.0, =0.16,...

org.jenkins-ci.plugins:git-chooser-alternative (>=1.0, <=1.1) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (1.4.0)

org.jenkins-ci.plugins:git MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-chooser-alternative =1.0, =1.1 Source cves: CVE-2022-36883 Source advisory:...

ru.yandex.jenkins.plugins.debuilder:debian-package-builder (>=1.6.1, <=1.6.6) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (2.0.4)

org.jenkins-ci.plugins:git MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - ru.yandex.jenkins.plugins.debuilder:debian-package-builder =1.6.1, =1.6.6 Source cves: CVE-2022-36883 Sourc...

org.jenkins-ci.plugins:git-tag-message (>=1.0, <=1.5) potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (2.2.7)

org.jenkins-ci.plugins:git MAVEN version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-tag-message =1.0, =1.5 Source cves: CVE-2022-36883 Source advisory:...

io.jenkins.blueocean:blueocean (>=1.0.0-b19-beta-1, <=1.0.0-b21-beta-1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b19-beta-1, <=1.0.0-b21-beta-1) +5 more potentially affected by CVE-2022-36883 via org.jenkins-ci.plugins:git (3.0.3)

org.jenkins-ci.plugins:git MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1,...