org.jenkins-ci.main:jenkins-test-harness (1.643), org.jenkins-ci.main:jenkins-war (1.643) +1 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.643)

org.jenkins-ci.main:jenkins-core MAVEN version 1.643 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.643 - org.jenkins-ci.main:jenkins-war 1.643 -...

org.jenkins-ci.main:jenkins-test-harness (1.589), org.jenkins-ci.main:jenkins-war (1.589) +1 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.589)

org.jenkins-ci.main:jenkins-core MAVEN version 1.589 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.589 - org.jenkins-ci.main:jenkins-war 1.589 -...

org.jenkins-ci.main:jenkins-test-harness (1.508), org.jenkins-ci.main:jenkins-war (1.508) +3 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.508)

org.jenkins-ci.main:jenkins-core MAVEN version 1.508 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.508 - org.jenkins-ci.main:jenkins-war 1.508 -...

org.jenkins-ci.main:jenkins-test-harness (1.636), org.jenkins-ci.main:jenkins-war (1.636) +1 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.636)

org.jenkins-ci.main:jenkins-core MAVEN version 1.636 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.636 - org.jenkins-ci.main:jenkins-war 1.636 -...

org.jenkins-ci.main:jenkins-test-harness (1.552), org.jenkins-ci.main:jenkins-war (1.552) +1 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.552)

org.jenkins-ci.main:jenkins-core MAVEN version 1.552 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.552 - org.jenkins-ci.main:jenkins-war 1.552 -...

org.jenkins-ci.main:jenkins-test-harness (1.629), org.jenkins-ci.main:jenkins-war (1.629) +1 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.629)

org.jenkins-ci.main:jenkins-core MAVEN version 1.629 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.629 - org.jenkins-ci.main:jenkins-war 1.629 -...

org.jenkins-ci.main:jenkins-test-harness (1.493), org.jenkins-ci.main:jenkins-war (1.493) +3 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.493)

org.jenkins-ci.main:jenkins-core MAVEN version 1.493 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.493 - org.jenkins-ci.main:jenkins-war 1.493 -...

org.bravo5.jenkins.plugins:vertx (>=1.0.0, <=1.0.1), org.jenkins-ci.main:jenkins-test-harness (1.482) +4 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.482)

org.jenkins-ci.main:jenkins-core MAVEN version 1.482 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.bravo5.jenkins.plugins:vertx =1.0.0, =1.0.1 - org.jenkins-ci.main:jenkins-test-harness 1.48...

RHEL 7 : OpenShift Container Platform 4.3.40 jenkins-2-plugins (RHSA-2020:4265)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4265 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

RHEL 7 : OpenShift Container Platform 4.3.35 jenkins-2-plugins (RHSA-2020:3616)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3616 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

Multiple Jenkins Plugins Multiple Security Vulnerabilities

Description Jenkins plugins are prone to the following vulnerabilities: 1. A HTML-injection vulnerability 2. Multiple information-disclosure vulnerabilities 3. A security-bypass vulnerability An attacker may leverage these issues to steal cookie-based authentication credentials, gain access to...

Jenkins Plugins Detection

Binary data jenkinspluginsdetect.nbin...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.1 jenkins-2-plugins security update

An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Threat Source newsletter (May 9)

Newsletter compiled by Jonathan Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. If you haven’t yet, there’s still time to register for this year’s Talos Threat Research Summit — our second annual conference by...

RHEL 7 : Red Hat OpenShift Container Platform 3.11 jenkins-2-plugins (RHSA-2019:0739)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:0739 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0, <=2.8) +1420 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (2.5.6.sec03)

org.springframework:spring-core MAVEN version 2.5.6.sec03 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =1.0, =1.0, =0.0.1, =0.1.1...

Unauthorized users are able to determine when a plugin was extracted from its JPI package

Files indicating when a plugin JPI file was last extracted into a subdirectory of plugins/ in the Jenkins home directory were accessible via HTTP by users with Overall/Read permission. This allowed unauthorized users to determine the likely install date of a given plugin. The affected files are n...

CSRF vulnerability and missing permission checks in GitHub Pull Request Builder Plugin allowed server-side request forgery, capturing credentials

GitHub Pull Request Builder Plugin did not perform permission checks on methods implementing form validation. This allowed users with Overall/Read access to Jenkins to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing...