Lucene search
K

6 matches found

RedHat Linux
RedHat Linux
added 2020/09/09 3:23 p.m.35 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.3.35 jenkins-2-plugins security update

An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

8.8CVSS7.1AI score0.01428EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2020/06/29 2:37 p.m.56 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.4.z jenkins-2-plugins security update

An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

8.8CVSS7.1AI score0.01428EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2020/06/29 12:0 a.m.40 views

RHEL 7 : OpenShift Container Platform 4.4.z jenkins-2-plugins (RHSA-2020:2737)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2737 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

8.8CVSS7.9AI score0.01428EPSS
Exploits0References16
NVD
NVD
added 2020/03/09 4:15 p.m.45 views

CVE-2020-2134

Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted constructor calls and crafted constructor bodies...

8.8CVSS8.6AI score0.01006EPSS
Exploits0References2
Cvelist
Cvelist
added 2020/03/09 3:0 p.m.40 views

CVE-2020-2134

Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted constructor calls and crafted constructor bodies...

8.6AI score0.01006EPSS
Exploits0References2
CVE
CVE
added 2020/03/09 3:0 p.m.146 views

CVE-2020-2134

CVE-2020-2134 relates to the Jenkins Script Security Plugin (versions up to 1.70) where sandbox protections could be bypassed by crafted constructor calls and bodies, enabling arbitrary code execution in the Jenkins controller JVM. The issue is documented in public advisories (GHSA/GHSA-GJ3Q-P8CM...

8.8CVSS8.4AI score0.01006EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder