Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users to cause a denial of service (improper plug-in and tool installation) via crafted update center data.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade nodejs-touchUpgrade nodejs-event-streamUpgrade nodejs-deep-extendUpgrade nodejs-splitUpgrade nodejs-parse-jsonUpgrade openshift-ansibleUpgrade nodejs-fill-rangeUpgrade rubygem-openshift-origin-consoleUpgrade nodejs-parse-globUpgrade nodejs-es6-promiseUpgrade nodejs-pinkie-promiseUpgrade nss_wrapperUpgrade nodejs-is-npmUpgrade openvswitchUpgrade nodejs-error-exUpgrade nodejs-chokidarUpgrade nodejs-lodash.basecopyUpgrade nodejs-lodash.baseassignUpgrade nodejs-filename-regexUpgrade nodejs-semverUpgrade nodejs-success-symbolUpgrade nodejs-object-assignUpgrade nodejs-readdirpUpgrade nodejs-lodash.isarrayUpgrade nodejs-arrifyUpgrade nodejs-lodash.defaultsUpgrade openshift-origin-cartridge-jbosseapUpgrade nodejs-async-eachUpgrade nodejs-is-extglobUpgrade nodejs-is-extendableUpgrade nodejs-iniUpgrade atomic-openshiftUpgrade nodejs-micromatchUpgrade nodejs-is-plain-objUpgrade nodejs-xdg-basedirUpgrade nodejs-ps-treeUpgrade rhcUpgrade nodejs-package-jsonUpgrade nodejs-read-all-streamUpgrade nodejs-ansi-wrapUpgrade openshift-origin-cartridge-phpUpgrade nodejs-duplexerUpgrade nodejs-strip-json-commentsUpgrade openshift-origin-cartridge-diyUpgrade nodejs-align-textUpgrade nodejs-timed-outUpgrade rubygem-openshift-origin-nodeUpgrade nodejs-lodash.restparamUpgrade openshift-origin-cartridge-rubyUpgrade nodejs-is-equal-shallowUpgrade nodejs-arr-diffUpgrade nodejs-glob-baseUpgrade nodejs-os-tmpdirUpgrade openshift-origin-cartridge-jbossewsUpgrade nodejs-uuidUpgrade openshift-origin-cartridge-nodejsUpgrade nodejs-is-redirectUpgrade nodejs-osenvUpgrade nodejs-preserveUpgrade nodejs-regex-cacheUpgrade nodejs-randomaticUpgrade openshift-origin-cartridge-haproxyUpgrade nodejs-extglobUpgrade openshift-origin-cartridge-jenkinsUpgrade nodejs-end-of-streamUpgrade nodejs-nodemonUpgrade rubygem-openshift-origin-gear-placementUpgrade nodejs-mkdirpUpgrade nodejs-lodash.getnativeUpgrade nodejs-string-lengthUpgrade nodejs-pause-streamUpgrade nodejs-lodash.createassignerUpgrade nodejs-lodash.keysUpgrade openshift-origin-cartridge-pythonUpgrade nodejs-for-inUpgrade nodejs-configstoreUpgrade nodejs-create-error-classUpgrade nodejs-arr-flattenUpgrade nodejs-pinkieUpgrade nodejs-map-streamUpgrade nodejs-lodash.bindcallbackUpgrade nodejs-capture-stack-traceUpgrade nodejs-bracesUpgrade origin-kibanaUpgrade nodejs-unzip-responseUpgrade openshift-origin-logshifterUpgrade nodejs-normalize-pathUpgrade openshift-origin-brokerUpgrade openshift-origin-node-utilUpgrade openshift-origin-cartridge-perlUpgrade heapsterUpgrade nodejs-isobjectUpgrade openshift-origin-cartridge-mockUpgrade nodejs-graceful-fsUpgrade jenkinsUpgrade nodejs-undefsafeUpgrade nodejs-duplexifyUpgrade nodejs-glob-parentUpgrade nodejs-is-binary-pathUpgrade nodejs-lowercase-keysUpgrade nodejs-is-streamUpgrade nodejs-binary-extensionsUpgrade nodejs-ansi-greenUpgrade nodejs-gotUpgrade nodejs-registry-urlUpgrade nodejs-kind-ofUpgrade nodejs-fromUpgrade nodejs-rcUpgrade nodejs-lazy-cacheUpgrade nodejs-for-ownUpgrade nodejs-lodash.isiterateecallUpgrade nodejs-array-uniqueUpgrade nodejs-throughUpgrade nodejs-semver-diffUpgrade nodejs-slideUpgrade nodejs-expand-rangeUpgrade nodejs-latest-versionUpgrade nodejs-anymatchUpgrade nodejs-is-numberUpgrade nodejs-prepend-httpUpgrade nodejs-url-parse-laxUpgrade nodejs-optimistUpgrade nodejs-repeat-elementUpgrade nodejs-stream-combinerUpgrade nodejs-expand-bracketsUpgrade nodejs-is-globUpgrade nodejs-node-status-codesUpgrade openshift-origin-broker-utilUpgrade rubygem-openshift-origin-routing-daemonUpgrade nodejs-lodash.assignUpgrade nodejs-write-file-atomicUpgrade nodejs-update-notifierUpgrade nodejs-is-dotfileUpgrade rubygem-openshift-origin-frontend-apache-vhostUpgrade rubygem-openshift-origin-msg-broker-mcollectiveUpgrade nodejs-is-primitiveUpgrade nodejs-object.omitUpgrade nodejs-lodash.isargumentsUpgrade nodejs-os-homedirUpgrade rubygem-openshift-origin-controller | Jun 18, 2018 | Feb 27, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub