com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (2.22.0-beta-1), io.jenkins.plugins:screenrecorder (>=0.3, <=0.7) +14 more potentially affected by CVE-2018-1999002 via org.jenkins-ci.main:jenkins-core (1.625)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger 2.22.0-beta-1 -...

org.jenkins-ci.main:jenkins-test-harness (1.422), org.jenkins-ci.main:jenkins-war (1.422) +3 more potentially affected by CVE-2018-1999007 via org.jenkins-ci.main:jenkins-core (1.422)

org.jenkins-ci.main:jenkins-core MAVEN version 1.422 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.422 - org.jenkins-ci.main:jenkins-war 1.422 -...

org.jenkins-ci.main:jenkins-test-harness (1.545), org.jenkins-ci.main:jenkins-war (1.545) +2 more potentially affected by CVE-2018-1999007 via org.jenkins-ci.main:jenkins-core (1.545)

org.jenkins-ci.main:jenkins-core MAVEN version 1.545 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.545 - org.jenkins-ci.main:jenkins-war 1.545 -...

org.jenkins-ci.main:jenkins-test-harness (1.598), org.jenkins-ci.main:jenkins-war (1.598) +3 more potentially affected by CVE-2018-1999002 via org.jenkins-ci.main:jenkins-core (1.598)

org.jenkins-ci.main:jenkins-core MAVEN version 1.598 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.598 - org.jenkins-ci.main:jenkins-war 1.598 -...

org.jenkins-ci.main:jenkins-test-harness (1.584), org.jenkins-ci.main:jenkins-war (1.584) +1 more potentially affected by CVE-2018-1999002 via org.jenkins-ci.main:jenkins-core (1.584)

org.jenkins-ci.main:jenkins-core MAVEN version 1.584 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.584 - org.jenkins-ci.main:jenkins-war 1.584 -...

org.jenkins-ci.main:jenkins-test-harness (1.594), org.jenkins-ci.main:jenkins-war (1.594) +2 more potentially affected by CVE-2018-1000194 via org.jenkins-ci.main:jenkins-core (1.594)

org.jenkins-ci.main:jenkins-core MAVEN version 1.594 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.594 - org.jenkins-ci.main:jenkins-war 1.594 -...

org.jenkins-ci.main:jenkins-test-harness (1.604), org.jenkins-ci.main:jenkins-war (1.604) +1 more potentially affected by CVE-2018-1000194 via org.jenkins-ci.main:jenkins-core (1.604)

org.jenkins-ci.main:jenkins-core MAVEN version 1.604 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.604 - org.jenkins-ci.main:jenkins-war 1.604 -...

org.jenkins-ci.main:jenkins-test-harness (1.606), org.jenkins-ci.main:jenkins-war (1.606) +1 more potentially affected by CVE-2018-1000194 via org.jenkins-ci.main:jenkins-core (1.606)

org.jenkins-ci.main:jenkins-core MAVEN version 1.606 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.606 - org.jenkins-ci.main:jenkins-war 1.606 -...

org.jenkins-ci.main:jenkins-test-harness (1.497), org.jenkins-ci.main:jenkins-war (1.497) +3 more potentially affected by CVE-2018-1000194 via org.jenkins-ci.main:jenkins-core (1.497)

org.jenkins-ci.main:jenkins-core MAVEN version 1.497 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.497 - org.jenkins-ci.main:jenkins-war 1.497 -...

org.jenkins-ci.main:jenkins-test-harness (1.573), org.jenkins-ci.main:jenkins-war (1.573) +3 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.573)

org.jenkins-ci.main:jenkins-core MAVEN version 1.573 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.573 - org.jenkins-ci.main:jenkins-war 1.573 -...

com.github.bogdanlivadariu:bootstraped-multi-test-results-report (>=1.0.0, <=1.3.4), org.jenkins-ci.main:jenkins-test-harness (1.616) +2 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.616)

org.jenkins-ci.main:jenkins-core MAVEN version 1.616 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.bogdanlivadariu:bootstraped-multi-test-results-report =1.0.0, =1.3.4 -...

com.nirima.jenkins.repository:jenkins-maven-plugin (>=0.6, <=0.9), com.nirima.jenkins.repository:pom (>=0.6, <=0.9) +12 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.417)

org.jenkins-ci.main:jenkins-core MAVEN version 1.417 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima.jenkins.repository:jenkins-maven-plugin =0.6, =0.6, =0.6, =1.0, =0.1, =1.1, =0.1.0,...

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (2.22.0-beta-1), io.jenkins.plugins:screenrecorder (>=0.3, <=0.7) +14 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.625)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger 2.22.0-beta-1 -...

Jenkins plugins Multiple Vulnerabilities (2022-03-29)

According to its their self-reported version number, the version of Jenkins plugins running on the remote web server are Jenkins Bitbucket Server Integration Plugin prior to 3.2.0, Continuous Integration with Toad Edge Plugin prior to 2.4, Coverage/Complexity Scatter Plot Plugin 1.1.1 or earlier,...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.7.43 security update

Red Hat OpenShift Container Platform release 4.7.43 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.7. Red Hat Product Security has rated this update as having a...

com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), cprice404:pipeline-classpath (0.1.0) +7 more potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.15)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.22, =1.15, =1.15, =1.1, =1.0....

com.testinium.jenkins:testinium (1.0), io.fabric8.jenkins.plugins:openshift-sync (>=0.9.1, <=1.0.45) +33 more potentially affected by CVE-2022-25179 via org.jenkins-ci.plugins.workflow:workflow-multibranch (>=2.0, <=2.20)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version =2.0, =0.9.1, =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1, =1.0.0-b15, =1.0.0-b15, =1.0-alpha-8, =1.0-alpha-4, =0.1-preview-1, =1.1.0-beta-4, =1.0-alpha-1, =2.2.0, =2.0, =2.0, =2.6 and more Source cves: CVE-2022-25179 Source advisory...

CVE-2022-25178

Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier does not restrict the names of resources passed to the libraryResource step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system...

com.github.bogdanlivadariu:bootstraped-multi-test-results-report (>=1.0.0, <=1.3.4), org.jenkins-ci.main:jenkins-test-harness (1.616) +2 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.616)

org.jenkins-ci.main:jenkins-core MAVEN version 1.616 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.bogdanlivadariu:bootstraped-multi-test-results-report =1.0.0, =1.3.4 -...

org.jenkins-ci.main:jenkins-test-harness (1.569), org.jenkins-ci.main:jenkins-war (1.569) +1 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.569)

org.jenkins-ci.main:jenkins-core MAVEN version 1.569 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.569 - org.jenkins-ci.main:jenkins-war 1.569 -...