Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Jenkins 2015 12 09 | — | Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to version 1.625.3Upgrade Jenkins LTS to the latest versionUpgrade Jenkins to version 1.641 | Nov 13, 2017 | Feb 3, 2016 |
| Redhat Openshift | — | Upgrade origin-kibanaUpgrade nodejs-preserveUpgrade nodejs-readdirpUpgrade nodejs-es6-promiseUpgrade nodejs-glob-parentUpgrade nodejs-semverUpgrade openshift-ansibleUpgrade nodejs-kind-ofUpgrade nodejs-package-jsonUpgrade openshift-origin-cartridge-mysqlUpgrade nodejs-micromatchUpgrade nodejs-arrifyUpgrade rubygem-openshift-origin-commonUpgrade nodejs-pause-streamUpgrade nodejs-graceful-fsUpgrade openshift-origin-cartridge-cronUpgrade nodejs-uuidUpgrade nodejs-create-error-classUpgrade nodejs-osenvUpgrade nodejs-object-assignUpgrade openshift-enterprise-upgradeUpgrade jenkinsUpgrade rhcUpgrade nss_wrapperUpgrade nodejs-touchUpgrade openvswitchUpgrade nodejs-latest-versionUpgrade openshift-origin-cartridge-pythonUpgrade nodejs-configstoreUpgrade nodejs-parse-jsonUpgrade nodejs-is-redirectUpgrade nodejs-expand-bracketsUpgrade nodejs-fromUpgrade nodejs-lodash.defaultsUpgrade nodejs-lodash.getnativeUpgrade nodejs-is-equal-shallowUpgrade nodejs-is-dotfileUpgrade nodejs-ansi-wrapUpgrade nodejs-read-all-streamUpgrade nodejs-arr-diffUpgrade nodejs-fill-rangeUpgrade openshift-origin-cartridge-haproxyUpgrade nodejs-async-eachUpgrade nodejs-rcUpgrade nodejs-regex-cacheUpgrade nodejs-is-extendableUpgrade nodejs-deep-extendUpgrade nodejs-undefsafeUpgrade nodejs-mkdirpUpgrade nodejs-lodash.createassignerUpgrade nodejs-write-file-atomicUpgrade atomic-openshiftUpgrade openshift-origin-msg-node-mcollectiveUpgrade nodejs-extglobUpgrade nodejs-repeat-elementUpgrade nodejs-object.omitUpgrade nodejs-timed-outUpgrade nodejs-strip-json-commentsUpgrade rubygem-openshift-origin-nodeUpgrade nodejs-end-of-streamUpgrade nodejs-pinkieUpgrade nodejs-iniUpgrade nodejs-url-parse-laxUpgrade nodejs-filename-regexUpgrade nodejs-registry-urlUpgrade nodejs-for-inUpgrade nodejs-xdg-basedirUpgrade nodejs-os-tmpdirUpgrade nodejs-slideUpgrade nodejs-duplexifyUpgrade nodejs-throughUpgrade nodejs-splitUpgrade nodejs-is-numberUpgrade nodejs-lodash.assignUpgrade nodejs-lowercase-keysUpgrade nodejs-ps-treeUpgrade nodejs-normalize-pathUpgrade nodejs-lodash.bindcallbackUpgrade nodejs-chokidarUpgrade nodejs-anymatchUpgrade nodejs-prepend-httpUpgrade nodejs-lazy-cacheUpgrade rubygem-openshift-origin-consoleUpgrade nodejs-isobjectUpgrade nodejs-array-uniqueUpgrade nodejs-expand-rangeUpgrade nodejs-glob-baseUpgrade nodejs-update-notifierUpgrade nodejs-align-textUpgrade nodejs-semver-diffUpgrade nodejs-map-streamUpgrade nodejs-success-symbolUpgrade nodejs-error-exUpgrade nodejs-lodash.baseassignUpgrade nodejs-is-npmUpgrade activemqUpgrade nodejs-capture-stack-traceUpgrade nodejs-lodash.isargumentsUpgrade nodejs-is-binary-pathUpgrade nodejs-lodash.keysUpgrade openshift-origin-node-utilUpgrade nodejs-is-plain-objUpgrade nodejs-gotUpgrade nodejs-duplexerUpgrade openshift-origin-broker-utilUpgrade nodejs-lodash.isiterateecallUpgrade nodejs-ansi-greenUpgrade nodejs-is-globUpgrade heapsterUpgrade nodejs-arr-flattenUpgrade nodejs-os-homedirUpgrade nodejs-bracesUpgrade nodejs-node-status-codesUpgrade nodejs-lodash.basecopyUpgrade nodejs-is-streamUpgrade nodejs-nodemonUpgrade nodejs-lodash.isarrayUpgrade rubygem-openshift-origin-frontend-apache-vhostUpgrade nodejs-optimistUpgrade nodejs-lodash.restparamUpgrade openshift-origin-node-proxyUpgrade nodejs-binary-extensionsUpgrade rubygem-openshift-origin-controllerUpgrade openshift-origin-cartridge-phpUpgrade nodejs-stream-combinerUpgrade phpUpgrade nodejs-is-extglobUpgrade nodejs-pinkie-promiseUpgrade nodejs-randomaticUpgrade nodejs-unzip-responseUpgrade nodejs-event-streamUpgrade nodejs-parse-globUpgrade nodejs-string-lengthUpgrade nodejs-for-ownUpgrade nodejs-is-primitive | Jun 18, 2018 | Dec 9, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub