RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2023:3195)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3195 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2023:3198)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3198 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

Critical: Red Hat Security Advisory: Red Hat Product OCP Tools 4.11 Openshift Jenkins security update

An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.11. Red Hat Product Security has rated this update as having a security impact of important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: jenkins and jenkins-2-plugins security update

An update for jenkins and jenkins-2-plugins is now available for OpenShift Developer Tools and Services for OCP 4.13. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.10.56 security update

Red Hat OpenShift Container Platform release 4.10.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.10. Red Hat Product Security has rated this update as having a...

CVE-2023-27904

A flaw was found in Jenkins. The affected version of Jenkins prints an error stack trace on agent-related pages when agent connections are broken. This stack trace may contain information about Jenkins configuration that is otherwise inaccessible to attackers...

CVE-2023-27904

creationtimestamp| type| source ---|---|--- 2023-03-11 00:27:42+00:00| seen| https://t.me/cibsecurity/59863 2025-02-28 19:27:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5959 2025-03-02 11:45:39+00:00| seen| Telegram/iPVcxoH8sPQP9s9fBQ1EzxFHRPe9jRAtxelt9HtGNiwZMtBN...

com.synopsys.arc.jenkinsci.plugins:job-restrictions (>=0.1, <=0.3), com.synopsys.jenkinsci:ownership (>=0.3, <=0.4) +27 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.509.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.synopsys.arc.jenkinsci.plugins:job-restrictions =0.1, =0.3, =1.2, =1.3, =1.1, =1.4, =4.1....

org.jenkins-ci.main:jenkins-test-harness (1.562), org.jenkins-ci.main:jenkins-war (1.562) +1 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.562)

org.jenkins-ci.main:jenkins-core MAVEN version 1.562 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.562 - org.jenkins-ci.main:jenkins-war 1.562 -...

com.nirima:docker-plugin (>=0.9-beta1, <=0.13.0), com.nirima:docker-plugin-parent (>=0.9-beta1, <=0.13.0) +26 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.565.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima:docker-plugin =0.9-beta1, =0.9-beta1, =2.13.0-beta-2, =1.0, =1.0, =1.0, =0.1.0,...

com.amazon.jenkins.fleet:ec2-fleet (1.0), com.apica:apicaloadtest (1.0) +40 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.609)

org.jenkins-ci.main:jenkins-core MAVEN version 1.609 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazon.jenkins.fleet:ec2-fleet 1.0 - com.apica:apicaloadtest 1.0 -...

org.jenkins-ci.main:jenkins-war (1.532.2.jenkins-22395-diag) potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.532.2.jenkins-22395-diag)

org.jenkins-ci.main:jenkins-core MAVEN version 1.532.2.jenkins-22395-diag is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.532.2.jenkins-22395-diag Source cves:...

com.cloudbees.jenkins.plugins:xpdev (1.0), com.cloudbees.plugins:build-flow-plugin (0.4) +50 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.447)

org.jenkins-ci.main:jenkins-core MAVEN version 1.447 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:xpdev 1.0 - com.cloudbees.plugins:build-flow-plugin 0.4 -...

com.github.bogdanlivadariu:bootstraped-multi-test-results-report (>=0.0.2, <=1.3.0), org.jenkins-ci.main:jenkins-test-harness (1.615) +4 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.615)

org.jenkins-ci.main:jenkins-core MAVEN version 1.615 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.bogdanlivadariu:bootstraped-multi-test-results-report =0.0.2, =1.76, =2.1.2, =2.1.3...

org.jenkins-ci.main:jenkins-test-harness (1.409.2), org.jenkins-ci.main:jenkins-war (1.409.2) +4 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.409.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.409.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.409.2 - org.jenkins-ci.main:jenkins-war 1.409.2 -...

org.jenkins-ci.main:jenkins-test-harness (1.423), org.jenkins-ci.main:jenkins-war (1.423) +4 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.423)

org.jenkins-ci.main:jenkins-core MAVEN version 1.423 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.423 - org.jenkins-ci.main:jenkins-war 1.423 -...

com.flowdock.jenkins:jenkins-flowdock-plugin (1.0.7), org.jenkins-ci.main:jenkins-test-harness (1.478) +5 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.478)

org.jenkins-ci.main:jenkins-core MAVEN version 1.478 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin 1.0.7 - org.jenkins-ci.main:jenkins-test-harness...

org.jenkins-ci.main:jenkins-test-harness (1.501), org.jenkins-ci.main:jenkins-war (1.501) +5 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.501)

org.jenkins-ci.main:jenkins-core MAVEN version 1.501 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.501 - org.jenkins-ci.main:jenkins-war 1.501 -...

com.thalesgroup.dtkit:dtkit-default-junit-jenkins (>=0.15, <=0.16), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (>=0.16, <=0.18) +42 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.396)

org.jenkins-ci.main:jenkins-core MAVEN version 1.396 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-default-junit-jenkins =0.15, =0.16, =0.12, =0.1, =1.0, =1.2 -...

net.praqma:matrix-reloaded (>=1.0.2, <=1.1.0), org.jenkins-ci.main:jenkins-test-harness (1.418) +5 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.418)

org.jenkins-ci.main:jenkins-core MAVEN version 1.418 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:matrix-reloaded =1.0.2, =1.4, =1.5 - org.jenkins-ci.plugins:plugin 1.418 Source cves...