Important: Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 Openshift Jenkins security update

An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.13. Red Hat Product Security has rated this update as having a security impact of important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update

An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.12. Red Hat Product Security has rated this update as having a security impact of important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 Openshift Jenkins security update

An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.15. Red Hat Product Security has rated this update as having a security impact of important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 8 : Red Hat Product OCP Tools 4.14 Openshift Jenkins (RHSA-2024:8885)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8885 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

RHEL 8 : Red Hat Product OCP Tools 4.13 Openshift Jenkins (RHSA-2024:8887)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8887 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

Jenkins LTS < 2.462.3 / Jenkins weekly < 2.479 Multiple Vulnerabilities

According to its its self-reported version number, the version of Jenkins running on the remote web server is Jenkins LTS prior to 2.462.3 or Jenkins weekly prior to 2.479. It is, therefore, affected by multiple vulnerabilities: - Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact...

CVE-2024-47803

creationtimestamp| type| source ---|---|--- 2024-10-02 18:52:14+00:00| seen| https://t.me/cvedetector/6838...

org.jenkins-ci.main:jenkins-test-harness (1.611), org.jenkins-ci.main:jenkins-war (1.611) +3 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.611)

org.jenkins-ci.main:jenkins-core MAVEN version 1.611 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.611 - org.jenkins-ci.main:jenkins-war 1.611 -...

com.thalesgroup.dtkit:dtkit-default-junit-jenkins (>=0.17, <=0.19), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (>=0.20, <=0.22) +9 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.411)

org.jenkins-ci.main:jenkins-core MAVEN version 1.411 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-default-junit-jenkins =0.17, =0.20, =1.7, =1.17, =1.18 -...

net.masterthought.jenkins:cucumber-reports (>=0.4.0, <=1.2.0), org.jenkins-ci.main:jenkins-test-harness (1.511) +4 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.511)

org.jenkins-ci.main:jenkins-core MAVEN version 1.511 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.masterthought.jenkins:cucumber-reports =0.4.0, =1.2.0 -...

org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

com.cloudbees.plugins:build-flow-plugin (0.5), org.jenkins-ci.main:jenkins-test-harness (1.463) +5 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.463)

org.jenkins-ci.main:jenkins-core MAVEN version 1.463 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.plugins:build-flow-plugin 0.5 - org.jenkins-ci.main:jenkins-test-harness 1.463 -...

org.jenkins-ci.main:jenkins-test-harness (1.560), org.jenkins-ci.main:jenkins-war (1.560) +6 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.560)

org.jenkins-ci.main:jenkins-core MAVEN version 1.560 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.560 - org.jenkins-ci.main:jenkins-war 1.560 -...

org.jenkins-ci.main:jenkins-test-harness (1.419), org.jenkins-ci.main:jenkins-war (1.419) +4 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.419)

org.jenkins-ci.main:jenkins-core MAVEN version 1.419 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.419 - org.jenkins-ci.main:jenkins-war 1.419 -...

org.jenkins-ci.main:jenkins-test-harness (1.476), org.jenkins-ci.main:jenkins-war (1.476) +4 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.476)

org.jenkins-ci.main:jenkins-core MAVEN version 1.476 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.476 - org.jenkins-ci.main:jenkins-war 1.476 -...

com.sonymobile.jenkins.plugins.lenientshutdown:lenientshutdown (>=1.1.0, <=1.1.1), org.jenkins-ci.main:jenkins-test-harness (1.601) +3 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.601)

org.jenkins-ci.main:jenkins-core MAVEN version 1.601 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonymobile.jenkins.plugins.lenientshutdown:lenientshutdown =1.1.0, =1.0, =1.3 -...

com.blackducksoftware.integration:blackduck-hub (3.1.0), com.inedo.buildmaster:inedo-buildmaster (>=1.0, <=1.3) +58 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.596.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.596.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.blackducksoftware.integration:blackduck-hub 3.1.0 - com.inedo.buildmaster:inedo-buildmast...

org.jenkins-ci.main:jenkins-test-harness (1.619), org.jenkins-ci.main:jenkins-war (1.619) +4 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.619)

org.jenkins-ci.main:jenkins-core MAVEN version 1.619 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.619 - org.jenkins-ci.main:jenkins-war 1.619 -...

org.jenkins-ci.main:jenkins-test-harness (1.543), org.jenkins-ci.main:jenkins-war (1.543) +1 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.543)

org.jenkins-ci.main:jenkins-core MAVEN version 1.543 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.543 - org.jenkins-ci.main:jenkins-war 1.543 -...

com.boxuk.jenkins:jslint (0.7.4), net.praqma:logging (>=0.1.1, <=0.1.2) +6 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.474)

org.jenkins-ci.main:jenkins-core MAVEN version 1.474 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.boxuk.jenkins:jslint 0.7.4 - net.praqma:logging =0.1.1, =0.7.5, =0.8.0 -...