7 matches found
RHEL 8 : OpenShift Container Platform 4.9.56 (RHSA-2023:0777)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0777 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...
CVE-2022-36885
Jenkins GitHub Plugin 1.34.4 and earlier uses a non-constant time comparison function when checking whether the provided and computed webhook signatures are equal, allowing attackers to use statistical methods to obtain a valid webhook signature...
com.barchart.jenkins:maven-release-cascade (>=1.0.0, <=1.0.2), com.base2services.jenkins:github-sqs-plugin (>=1.0, <=1.5) +26 more potentially affected by CVE-2022-36885 via com.coravy.hudson.plugins.github:github (>=1.2, <=1.29.3)
com.coravy.hudson.plugins.github:github MAVEN version =1.2, =1.0.0, =1.0, =4.0.9, =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1, =1.0.0-b15, =1.0.0-b15, =1.0-alpha-8, =1.0-alpha-4, =0.1-preview-4, =1.0-alpha-1, =1.3.0-alpha.1, =1.0, =0.9.14, =4.0.8 and more Source cves: CVE-2022-36885 Source advisory:...
com.barchart.jenkins:maven-release-cascade (>=1.0.0, <=1.0.2), com.base2services.jenkins:github-sqs-plugin (>=1.0, <=1.5) +26 more potentially affected by CVE-2022-36885 via com.coravy.hudson.plugins.github:github (>=1.2, <=1.29.3)
com.coravy.hudson.plugins.github:github MAVEN version =1.2, =1.0.0, =1.0, =4.0.9, =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1, =1.0.0-b15, =1.0.0-b15, =1.0-alpha-8, =1.0-alpha-4, =0.1-preview-4, =1.0-alpha-1, =1.3.0-alpha.1, =1.0, =0.9.14, =4.0.8 and more Source cves: CVE-2022-36885 Source advisory:...
CVE-2022-36885
Jenkins GitHub Plugin 1.34.4 and earlier uses a non-constant time comparison function when checking whether the provided and computed webhook signatures are equal, allowing attackers to use statistical methods to obtain a valid webhook signature...
CVE-2022-36885
CVE-2022-36885 affects Jenkins GitHub Plugin 1.34.4 and earlier. The vulnerability arises from a non-constant time comparison when verifying webhook signatures, enabling attackers to use statistical methods to forge a valid webhook signature. Impact is limited to systems using the vulnerable plug...
CVE-2022-36885
Jenkins GitHub Plugin 1.34.4 and earlier uses a non-constant time comparison function when checking whether the provided and computed webhook signatures are equal, allowing attackers to use statistical methods to obtain a valid webhook signature...