PT-2022-15741

Name of the Vulnerable Software and Affected Versions Apache Karaf versions prior to 4.2.15 Apache Karaf versions prior to 4.3.6 Description The issue is related to partial path traversal in Apache Karaf obr: commands and the run goal on the karaf-maven-plugin, allowing an attacker to break out o...

hudson.plugins:webload (1.0), org.jenkins-ci.main:jenkins-test-harness (1.534) +5 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.534)

org.jenkins-ci.main:jenkins-core MAVEN version 1.534 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins:webload 1.0 - org.jenkins-ci.main:jenkins-test-harness 1.534 -...

com.thalesgroup.dtkit:dtkit-metrics-hudson-api (>=0.14, <=0.14.1), com.thalesgroup.jenkins-ci.plugins:cppcheck (>=0.11, <=0.14) +29 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.397)

org.jenkins-ci.main:jenkins-core MAVEN version 1.397 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-metrics-hudson-api =0.14, =0.11, =1.5, =1.15, =0.3, =0.5.11 -...

org.jenkins-ci.main:jenkins-war (1.509.3.jenkins-14362-jzlib), org.jenkins-ci.main:maven-plugin (1.509.3.jenkins-14362-jzlib) potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.509.3.jenkins-14362-jzlib)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.3.jenkins-14362-jzlib is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.509.3.jenkins-14362-jzlib -...

org.jenkins-ci.main:jenkins-test-harness (1.495), org.jenkins-ci.main:jenkins-war (1.495) +6 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.495)

org.jenkins-ci.main:jenkins-core MAVEN version 1.495 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.495 - org.jenkins-ci.main:jenkins-war 1.495 -...

info.bluefloyd.jenkins:jenkins-jira-issue-updater (>=1.1, <=1.13), jenkins.ci.plugins.computerqueue:computer-queue-plugin (>=1.0, <=1.3) +6 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.437)

org.jenkins-ci.main:jenkins-core MAVEN version 1.437 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - info.bluefloyd.jenkins:jenkins-jira-issue-updater =1.1, =1.0, =1.3 -...

org.jenkins-ci.main:jenkins-test-harness (1.430), org.jenkins-ci.main:jenkins-war (1.430) +6 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.430)

org.jenkins-ci.main:jenkins-core MAVEN version 1.430 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.430 - org.jenkins-ci.main:jenkins-war 1.430 -...

org.jenkins-ci.main:jenkins-test-harness (1.498), org.jenkins-ci.main:jenkins-war (1.498) +8 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.498)

org.jenkins-ci.main:jenkins-core MAVEN version 1.498 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.498 - org.jenkins-ci.main:jenkins-war 1.498 -...

org.jenkins-ci.main:jenkins-test-harness (1.501), org.jenkins-ci.main:jenkins-war (1.501) +5 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.501)

org.jenkins-ci.main:jenkins-core MAVEN version 1.501 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.501 - org.jenkins-ci.main:jenkins-war 1.501 -...

org.jenkins-ci.main:jenkins-war (1.509.2.jenkins-8856-diag), org.jenkins-ci.main:maven-plugin (1.509.2.jenkins-8856-diag) potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.509.2.jenkins-8856-diag)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.2.jenkins-8856-diag is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.509.2.jenkins-8856-diag -...

org.jenkins-ci.main:jenkins-test-harness (1.441), org.jenkins-ci.main:jenkins-war (1.441) +3 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.441)

org.jenkins-ci.main:jenkins-core MAVEN version 1.441 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.441 - org.jenkins-ci.main:jenkins-war 1.441 -...

org.jenkins-ci.main:jenkins-test-harness (1.530), org.jenkins-ci.main:jenkins-war (1.530) +3 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.530)

org.jenkins-ci.main:jenkins-core MAVEN version 1.530 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.530 - org.jenkins-ci.main:jenkins-war 1.530 -...

org.jenkins-ci.main:jenkins-test-harness (1.453), org.jenkins-ci.main:jenkins-war (1.453) +3 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.453)

org.jenkins-ci.main:jenkins-core MAVEN version 1.453 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.453 - org.jenkins-ci.main:jenkins-war 1.453 -...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (0.3), org.jenkins-ci.main:jenkins-test-harness (1.554.3) +34 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.554.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin 0.3 -...

org.jenkins-ci.main:jenkins-test-harness (1.527), org.jenkins-ci.main:jenkins-war (1.527) +3 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.527)

org.jenkins-ci.main:jenkins-core MAVEN version 1.527 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.527 - org.jenkins-ci.main:jenkins-war 1.527 -...

org.jenkins-ci.main:jenkins-test-harness (1.490), org.jenkins-ci.main:jenkins-war (1.490) +4 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.490)

org.jenkins-ci.main:jenkins-core MAVEN version 1.490 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.490 - org.jenkins-ci.main:jenkins-war 1.490 -...

org.jenkins-ci.main:jenkins-test-harness (1.401), org.jenkins-ci.main:jenkins-war (1.401) +7 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.401)

org.jenkins-ci.main:jenkins-core MAVEN version 1.401 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.401 - org.jenkins-ci.main:jenkins-war 1.401 -...

com.castlemon.hudson:cucumber-perf (>=1.1, <=2.0.6), org.jenkins-ci.main:jenkins-test-harness (1.519) +5 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.519)

org.jenkins-ci.main:jenkins-core MAVEN version 1.519 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.castlemon.hudson:cucumber-perf =1.1, =1.3.4, =1.3.5 - org.jenkins-ci.plugins:plugin 1.519...

org.jenkins-ci.main:jenkins-test-harness (1.435), org.jenkins-ci.main:jenkins-war (1.435) +3 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.435)

org.jenkins-ci.main:jenkins-core MAVEN version 1.435 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.435 - org.jenkins-ci.main:jenkins-war 1.435 -...

org.jenkins-ci.main:jenkins-test-harness (1.438), org.jenkins-ci.main:jenkins-war (1.438) +6 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.438)

org.jenkins-ci.main:jenkins-core MAVEN version 1.438 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.438 - org.jenkins-ci.main:jenkins-war 1.438 -...