The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade nodejs-lodash.isarrayUpgrade openshift-origin-broker-utilUpgrade nodejs-is-npmUpgrade nodejs-xdg-basedirUpgrade nodejs-micromatchUpgrade nodejs-for-ownUpgrade nodejs-fill-rangeUpgrade openshift-origin-cartridge-perlUpgrade nodejs-is-streamUpgrade nodejs-lowercase-keysUpgrade nodejs-arr-flattenUpgrade nodejs-lodash.keysUpgrade nodejs-expand-bracketsUpgrade nodejs-registry-urlUpgrade nodejs-lodash.baseassignUpgrade openshift-origin-cartridge-pythonUpgrade nodejs-duplexerUpgrade nodejs-os-homedirUpgrade openshift-origin-cartridge-nodejsUpgrade nodejs-touchUpgrade nodejs-lodash.basecopyUpgrade rubygem-openshift-origin-msg-broker-mcollectiveUpgrade nodejs-bracesUpgrade nodejs-anymatchUpgrade nodejs-update-notifierUpgrade nodejs-ansi-wrapUpgrade nodejs-array-uniqueUpgrade nodejs-lodash.isargumentsUpgrade rubygem-openshift-origin-consoleUpgrade nodejs-gotUpgrade nodejs-uuidUpgrade nodejs-for-inUpgrade rubygem-openshift-origin-controllerUpgrade nodejs-fromUpgrade nodejs-error-exUpgrade nodejs-prepend-httpUpgrade nodejs-slideUpgrade openshift-origin-cartridge-phpUpgrade nodejs-normalize-pathUpgrade nodejs-lodash.restparamUpgrade nodejs-semver-diffUpgrade rubygem-openshift-origin-frontend-apache-vhostUpgrade nodejs-optimistUpgrade nodejs-lazy-cacheUpgrade nodejs-chokidarUpgrade nodejs-is-numberUpgrade nodejs-is-globUpgrade nodejs-os-tmpdirUpgrade nodejs-stream-combinerUpgrade nodejs-success-symbolUpgrade nodejs-isobjectUpgrade nodejs-string-lengthUpgrade nodejs-lodash.isiterateecallUpgrade openshift-origin-node-utilUpgrade nodejs-unzip-responseUpgrade nodejs-pinkie-promiseUpgrade heapsterUpgrade openshift-origin-brokerUpgrade nodejs-throughUpgrade nodejs-nodemonUpgrade nodejs-randomaticUpgrade nodejs-end-of-streamUpgrade nodejs-align-textUpgrade nodejs-node-status-codesUpgrade nodejs-duplexifyUpgrade nodejs-ps-treeUpgrade nodejs-glob-parentUpgrade nodejs-capture-stack-traceUpgrade nodejs-parse-globUpgrade nodejs-event-streamUpgrade nodejs-binary-extensionsUpgrade openshift-origin-cartridge-jenkinsUpgrade nodejs-is-binary-pathUpgrade nodejs-is-plain-objUpgrade nodejs-pinkieUpgrade nss_wrapperUpgrade nodejs-is-redirectUpgrade openshift-origin-cartridge-jbosseapUpgrade nodejs-graceful-fsUpgrade nodejs-object.omitUpgrade nodejs-create-error-classUpgrade nodejs-ansi-greenUpgrade openshift-ansibleUpgrade nodejs-latest-versionUpgrade nodejs-rcUpgrade openshift-origin-cartridge-mockUpgrade nodejs-kind-ofUpgrade rubygem-openshift-origin-nodeUpgrade nodejs-filename-regexUpgrade atomic-openshiftUpgrade nodejs-is-dotfileUpgrade nodejs-osenvUpgrade rubygem-openshift-origin-gear-placementUpgrade nodejs-pause-streamUpgrade nodejs-parse-jsonUpgrade openshift-origin-cartridge-jbossewsUpgrade nodejs-read-all-streamUpgrade nodejs-lodash.bindcallbackUpgrade nodejs-is-equal-shallowUpgrade nodejs-preserveUpgrade nodejs-extglobUpgrade nodejs-lodash.createassignerUpgrade nodejs-map-streamUpgrade nodejs-write-file-atomicUpgrade openshift-origin-cartridge-diyUpgrade openshift-origin-cartridge-rubyUpgrade nodejs-repeat-elementUpgrade nodejs-arrifyUpgrade nodejs-configstoreUpgrade nodejs-readdirpUpgrade rubygem-openshift-origin-routing-daemonUpgrade nodejs-mkdirpUpgrade nodejs-is-primitiveUpgrade nodejs-lodash.assignUpgrade nodejs-lodash.getnativeUpgrade nodejs-es6-promiseUpgrade nodejs-is-extglobUpgrade openvswitchUpgrade nodejs-lodash.defaultsUpgrade openshift-origin-cartridge-haproxyUpgrade nodejs-strip-json-commentsUpgrade nodejs-semverUpgrade nodejs-deep-extendUpgrade nodejs-url-parse-laxUpgrade nodejs-is-extendableUpgrade nodejs-object-assignUpgrade nodejs-timed-outUpgrade jenkinsUpgrade openshift-origin-logshifterUpgrade nodejs-regex-cacheUpgrade nodejs-iniUpgrade nodejs-arr-diffUpgrade nodejs-splitUpgrade nodejs-package-jsonUpgrade nodejs-expand-rangeUpgrade rhcUpgrade nodejs-undefsafeUpgrade nodejs-async-eachUpgrade nodejs-glob-baseUpgrade origin-kibana | Jun 18, 2018 | Feb 27, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub