The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Jenkins before 1.638 and LTS before 1.625.2 do not properly verify the shared secret used in JNLP slave connections, which allows remote attackers to connect as slaves and obtain sensitive information or possibly gain administrative access by leveraging knowledge of the name of a slave.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Jenkins 2015 11 11 | — | Upgrade Jenkins LTS to the latest versionUpgrade Jenkins to version 1.638Upgrade Jenkins LTS to version 1.625.2Upgrade Jenkins to the latest version | Nov 13, 2017 | Nov 25, 2015 |
| Redhat Openshift | — | Upgrade nodejs-lodash.isargumentsUpgrade nodejs-repeat-elementUpgrade rubygem-openshift-origin-consoleUpgrade nodejs-gotUpgrade nodejs-optimistUpgrade nodejs-arrifyUpgrade nodejs-pinkie-promiseUpgrade nodejs-uuidUpgrade nodejs-regex-cacheUpgrade nodejs-arr-diffUpgrade nodejs-filename-regexUpgrade nodejs-pause-streamUpgrade nodejs-duplexifyUpgrade openshift-origin-cartridge-pythonUpgrade nodejs-graceful-fsUpgrade nodejs-is-equal-shallowUpgrade nodejs-write-file-atomicUpgrade nodejs-is-redirectUpgrade nodejs-kind-ofUpgrade nodejs-semverUpgrade nodejs-nodemonUpgrade openshift-origin-broker-utilUpgrade nodejs-anymatchUpgrade nodejs-lodash.isiterateecallUpgrade nodejs-update-notifierUpgrade nodejs-undefsafeUpgrade nodejs-lodash.getnativeUpgrade jenkinsUpgrade nodejs-deep-extendUpgrade heapsterUpgrade nodejs-object-assignUpgrade nodejs-readdirpUpgrade nodejs-iniUpgrade nodejs-lodash.isarrayUpgrade nodejs-touchUpgrade nodejs-mkdirpUpgrade openshift-enterprise-upgradeUpgrade nodejs-splitUpgrade nodejs-end-of-streamUpgrade nodejs-strip-json-commentsUpgrade nodejs-lodash.basecopyUpgrade openvswitchUpgrade nodejs-lazy-cacheUpgrade nodejs-slideUpgrade nodejs-is-numberUpgrade openshift-origin-msg-node-mcollectiveUpgrade nodejs-lodash.restparamUpgrade rubygem-openshift-origin-frontend-apache-vhostUpgrade nodejs-is-plain-objUpgrade nodejs-lodash.createassignerUpgrade nodejs-osenvUpgrade rhcUpgrade nodejs-for-inUpgrade rubygem-openshift-origin-nodeUpgrade rubygem-openshift-origin-commonUpgrade nss_wrapperUpgrade nodejs-align-textUpgrade nodejs-randomaticUpgrade nodejs-is-globUpgrade nodejs-is-streamUpgrade nodejs-map-streamUpgrade nodejs-array-uniqueUpgrade phpUpgrade nodejs-micromatchUpgrade nodejs-fromUpgrade nodejs-os-tmpdirUpgrade nodejs-string-lengthUpgrade nodejs-success-symbolUpgrade nodejs-chokidarUpgrade openshift-origin-cartridge-mysqlUpgrade nodejs-object.omitUpgrade nodejs-ps-treeUpgrade nodejs-is-npmUpgrade nodejs-error-exUpgrade nodejs-duplexerUpgrade openshift-origin-node-utilUpgrade nodejs-capture-stack-traceUpgrade nodejs-throughUpgrade nodejs-is-extglobUpgrade openshift-ansibleUpgrade nodejs-ansi-greenUpgrade nodejs-os-homedirUpgrade nodejs-node-status-codesUpgrade nodejs-async-eachUpgrade nodejs-semver-diffUpgrade nodejs-unzip-responseUpgrade nodejs-lodash.baseassignUpgrade nodejs-lodash.bindcallbackUpgrade nodejs-rcUpgrade nodejs-lodash.keysUpgrade nodejs-ansi-wrapUpgrade nodejs-fill-rangeUpgrade nodejs-expand-bracketsUpgrade nodejs-es6-promiseUpgrade openshift-origin-cartridge-phpUpgrade nodejs-lodash.assignUpgrade atomic-openshiftUpgrade nodejs-registry-urlUpgrade nodejs-parse-jsonUpgrade nodejs-lowercase-keysUpgrade nodejs-timed-outUpgrade nodejs-latest-versionUpgrade nodejs-is-extendableUpgrade nodejs-xdg-basedirUpgrade openshift-origin-node-proxyUpgrade nodejs-isobjectUpgrade nodejs-parse-globUpgrade nodejs-binary-extensionsUpgrade nodejs-preserveUpgrade nodejs-for-ownUpgrade nodejs-glob-parentUpgrade nodejs-prepend-httpUpgrade openshift-origin-cartridge-haproxyUpgrade nodejs-is-primitiveUpgrade nodejs-is-dotfileUpgrade nodejs-url-parse-laxUpgrade nodejs-stream-combinerUpgrade openshift-origin-cartridge-cronUpgrade nodejs-package-jsonUpgrade nodejs-is-binary-pathUpgrade nodejs-lodash.defaultsUpgrade origin-kibanaUpgrade nodejs-event-streamUpgrade nodejs-read-all-streamUpgrade nodejs-arr-flattenUpgrade nodejs-configstoreUpgrade nodejs-extglobUpgrade activemqUpgrade nodejs-bracesUpgrade nodejs-normalize-pathUpgrade nodejs-create-error-classUpgrade nodejs-expand-rangeUpgrade nodejs-pinkieUpgrade nodejs-glob-baseUpgrade rubygem-openshift-origin-controller | Jun 18, 2018 | Nov 11, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub