The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted plugin.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Jenkins 2015 12 09 | — | Upgrade Jenkins to version 1.641Upgrade Jenkins LTS to version 1.625.3Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to the latest version | Nov 13, 2017 | Feb 3, 2016 |
| Redhat Openshift | — | Upgrade nodejs-configstoreUpgrade openshift-enterprise-upgradeUpgrade nodejs-undefsafeUpgrade nodejs-arr-diffUpgrade nodejs-update-notifierUpgrade nodejs-preserveUpgrade openshift-origin-cartridge-pythonUpgrade nodejs-pinkie-promiseUpgrade nodejs-ansi-wrapUpgrade nodejs-end-of-streamUpgrade nodejs-object.omitUpgrade nodejs-lodash.createassignerUpgrade nodejs-is-streamUpgrade nodejs-glob-parentUpgrade nodejs-filename-regexUpgrade nodejs-regex-cacheUpgrade nodejs-duplexifyUpgrade jenkinsUpgrade nodejs-readdirpUpgrade nodejs-lodash.isiterateecallUpgrade nodejs-repeat-elementUpgrade nodejs-iniUpgrade nodejs-map-streamUpgrade nodejs-package-jsonUpgrade nodejs-write-file-atomicUpgrade openshift-origin-broker-utilUpgrade nss_wrapperUpgrade nodejs-async-eachUpgrade nodejs-lodash.defaultsUpgrade nodejs-is-primitiveUpgrade nodejs-url-parse-laxUpgrade nodejs-is-equal-shallowUpgrade rubygem-openshift-origin-nodeUpgrade nodejs-rcUpgrade openshift-origin-cartridge-cronUpgrade nodejs-arrifyUpgrade rhcUpgrade nodejs-is-extendableUpgrade nodejs-lazy-cacheUpgrade nodejs-uuidUpgrade nodejs-pinkieUpgrade nodejs-expand-rangeUpgrade nodejs-lodash.basecopyUpgrade openvswitchUpgrade nodejs-normalize-pathUpgrade heapsterUpgrade openshift-ansibleUpgrade origin-kibanaUpgrade nodejs-lodash.isarrayUpgrade nodejs-create-error-classUpgrade nodejs-touchUpgrade phpUpgrade nodejs-read-all-streamUpgrade nodejs-mkdirpUpgrade nodejs-glob-baseUpgrade nodejs-graceful-fsUpgrade nodejs-is-redirectUpgrade nodejs-lodash.getnativeUpgrade nodejs-pause-streamUpgrade openshift-origin-cartridge-mysqlUpgrade nodejs-bracesUpgrade openshift-origin-msg-node-mcollectiveUpgrade nodejs-is-dotfileUpgrade nodejs-anymatchUpgrade nodejs-gotUpgrade nodejs-object-assignUpgrade openshift-origin-cartridge-haproxyUpgrade nodejs-extglobUpgrade nodejs-micromatchUpgrade nodejs-strip-json-commentsUpgrade nodejs-kind-ofUpgrade nodejs-deep-extendUpgrade nodejs-semverUpgrade nodejs-array-uniqueUpgrade rubygem-openshift-origin-frontend-apache-vhostUpgrade nodejs-stream-combinerUpgrade nodejs-error-exUpgrade nodejs-os-homedirUpgrade nodejs-is-numberUpgrade nodejs-capture-stack-traceUpgrade nodejs-isobjectUpgrade nodejs-lodash.assignUpgrade nodejs-registry-urlUpgrade nodejs-throughUpgrade nodejs-lodash.bindcallbackUpgrade nodejs-is-binary-pathUpgrade rubygem-openshift-origin-controllerUpgrade nodejs-fill-rangeUpgrade openshift-origin-node-utilUpgrade nodejs-randomaticUpgrade nodejs-lodash.keysUpgrade nodejs-ps-treeUpgrade nodejs-for-inUpgrade nodejs-duplexerUpgrade nodejs-node-status-codesUpgrade openshift-origin-cartridge-phpUpgrade nodejs-semver-diffUpgrade nodejs-xdg-basedirUpgrade nodejs-string-lengthUpgrade nodejs-es6-promiseUpgrade nodejs-slideUpgrade nodejs-is-npmUpgrade nodejs-success-symbolUpgrade rubygem-openshift-origin-consoleUpgrade nodejs-osenvUpgrade nodejs-os-tmpdirUpgrade nodejs-prepend-httpUpgrade nodejs-ansi-greenUpgrade nodejs-is-globUpgrade nodejs-fromUpgrade nodejs-lodash.restparamUpgrade nodejs-binary-extensionsUpgrade nodejs-nodemonUpgrade nodejs-event-streamUpgrade nodejs-is-plain-objUpgrade nodejs-lowercase-keysUpgrade nodejs-lodash.isargumentsUpgrade nodejs-lodash.baseassignUpgrade nodejs-parse-jsonUpgrade activemqUpgrade nodejs-latest-versionUpgrade nodejs-for-ownUpgrade nodejs-splitUpgrade nodejs-is-extglobUpgrade nodejs-align-textUpgrade nodejs-arr-flattenUpgrade nodejs-parse-globUpgrade nodejs-timed-outUpgrade nodejs-unzip-responseUpgrade nodejs-expand-bracketsUpgrade nodejs-optimistUpgrade nodejs-chokidarUpgrade rubygem-openshift-origin-commonUpgrade openshift-origin-node-proxyUpgrade atomic-openshift | Jun 18, 2018 | Dec 9, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub