Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users to cause a denial of service (improper plug-in and tool installation) via crafted update center data.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade openshift-origin-cartridge-jbosseapUpgrade nodejs-event-streamUpgrade nodejs-object-assignUpgrade openshift-ansibleUpgrade nodejs-async-eachUpgrade nodejs-splitUpgrade nodejs-uuidUpgrade openshift-origin-cartridge-pythonUpgrade nodejs-extglobUpgrade nodejs-parse-jsonUpgrade nodejs-osenvUpgrade nodejs-regex-cacheUpgrade nodejs-lodash.getnativeUpgrade nodejs-nodemonUpgrade nodejs-is-npmUpgrade nodejs-lodash.isarrayUpgrade nodejs-chokidarUpgrade nodejs-arr-diffUpgrade openvswitchUpgrade nodejs-randomaticUpgrade nodejs-parse-globUpgrade rubygem-openshift-origin-nodeUpgrade openshift-origin-cartridge-diyUpgrade atomic-openshiftUpgrade nodejs-deep-extendUpgrade nodejs-mkdirpUpgrade openshift-origin-cartridge-rubyUpgrade rhcUpgrade nodejs-arrifyUpgrade nodejs-lodash.restparamUpgrade openshift-origin-cartridge-nodejsUpgrade nodejs-micromatchUpgrade nodejs-pause-streamUpgrade nodejs-lodash.createassignerUpgrade openshift-origin-cartridge-jbossewsUpgrade nodejs-semverUpgrade openshift-origin-cartridge-phpUpgrade nodejs-package-jsonUpgrade nodejs-glob-baseUpgrade nss_wrapperUpgrade nodejs-xdg-basedirUpgrade openshift-origin-cartridge-jenkinsUpgrade nodejs-error-exUpgrade nodejs-is-extendableUpgrade nodejs-iniUpgrade nodejs-duplexerUpgrade nodejs-preserveUpgrade nodejs-lodash.keysUpgrade nodejs-lodash.basecopyUpgrade nodejs-is-equal-shallowUpgrade rubygem-openshift-origin-consoleUpgrade nodejs-os-tmpdirUpgrade nodejs-readdirpUpgrade nodejs-is-extglobUpgrade nodejs-es6-promiseUpgrade nodejs-ps-treeUpgrade nodejs-align-textUpgrade nodejs-lodash.baseassignUpgrade nodejs-timed-outUpgrade nodejs-configstoreUpgrade nodejs-filename-regexUpgrade nodejs-string-lengthUpgrade openshift-origin-cartridge-haproxyUpgrade nodejs-fill-rangeUpgrade nodejs-ansi-wrapUpgrade nodejs-for-inUpgrade nodejs-end-of-streamUpgrade nodejs-strip-json-commentsUpgrade nodejs-touchUpgrade rubygem-openshift-origin-gear-placementUpgrade nodejs-is-plain-objUpgrade nodejs-read-all-streamUpgrade nodejs-pinkie-promiseUpgrade nodejs-success-symbolUpgrade nodejs-lodash.defaultsUpgrade nodejs-is-redirectUpgrade nodejs-array-uniqueUpgrade nodejs-latest-versionUpgrade nodejs-node-status-codesUpgrade nodejs-lodash.assignUpgrade origin-kibanaUpgrade nodejs-is-numberUpgrade nodejs-expand-rangeUpgrade nodejs-binary-extensionsUpgrade openshift-origin-logshifterUpgrade nodejs-unzip-responseUpgrade nodejs-fromUpgrade openshift-origin-node-utilUpgrade openshift-origin-broker-utilUpgrade nodejs-rcUpgrade nodejs-map-streamUpgrade nodejs-repeat-elementUpgrade rubygem-openshift-origin-controllerUpgrade nodejs-optimistUpgrade nodejs-is-globUpgrade nodejs-is-streamUpgrade openshift-origin-cartridge-mockUpgrade nodejs-capture-stack-traceUpgrade openshift-origin-cartridge-perlUpgrade jenkinsUpgrade nodejs-arr-flattenUpgrade nodejs-graceful-fsUpgrade nodejs-ansi-greenUpgrade nodejs-gotUpgrade nodejs-stream-combinerUpgrade nodejs-normalize-pathUpgrade nodejs-lodash.isiterateecallUpgrade nodejs-bracesUpgrade nodejs-slideUpgrade nodejs-lodash.bindcallbackUpgrade nodejs-lowercase-keysUpgrade nodejs-for-ownUpgrade nodejs-lazy-cacheUpgrade nodejs-expand-bracketsUpgrade nodejs-is-primitiveUpgrade nodejs-object.omitUpgrade rubygem-openshift-origin-msg-broker-mcollectiveUpgrade nodejs-prepend-httpUpgrade nodejs-url-parse-laxUpgrade nodejs-is-binary-pathUpgrade rubygem-openshift-origin-frontend-apache-vhostUpgrade nodejs-is-dotfileUpgrade nodejs-semver-diffUpgrade nodejs-write-file-atomicUpgrade rubygem-openshift-origin-routing-daemonUpgrade nodejs-os-homedirUpgrade heapsterUpgrade nodejs-update-notifierUpgrade nodejs-duplexifyUpgrade openshift-origin-brokerUpgrade nodejs-throughUpgrade nodejs-anymatchUpgrade nodejs-glob-parentUpgrade nodejs-pinkieUpgrade nodejs-create-error-classUpgrade nodejs-isobjectUpgrade nodejs-kind-ofUpgrade nodejs-lodash.isargumentsUpgrade nodejs-undefsafeUpgrade nodejs-registry-url | Jun 18, 2018 | Feb 27, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub