The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Jenkins 2016 02 24 | — | Upgrade Jenkins LTS to the latest versionUpgrade Jenkins LTS to version 1.642.2Upgrade Jenkins to version 1.650Upgrade Jenkins to the latest version | Nov 13, 2017 | Apr 7, 2016 |
| Redhat Openshift | — | Upgrade rubygem-openshift-origin-msg-broker-mcollectiveUpgrade openshift-origin-node-utilUpgrade openshift-origin-cartridge-phpUpgrade ImageMagickUpgrade openshift-origin-node-proxyUpgrade jenkins-plugin-credentialsUpgrade openshift-origin-cartridge-jenkinsUpgrade openshift-origin-broker-utilUpgrade rubygem-openshift-origin-controllerUpgrade openshift-origin-cartridge-perlUpgrade openshift-origin-cartridge-pythonUpgrade rubygem-openshift-origin-frontend-haproxy-sni-proxyUpgrade openshift-origin-cartridge-nodejsUpgrade rubygem-openshift-origin-routing-daemonUpgrade jenkinsUpgrade openshift-origin-cartridge-jbosseapUpgrade openshift-origin-cartridge-mysqlUpgrade openshift-origin-cartridge-mongodbUpgrade activemqUpgrade rhcUpgrade openshift-origin-cartridge-jenkins-clientUpgrade openshift-origin-brokerUpgrade jenkins-plugin-durable-taskUpgrade rubygem-openshift-origin-nodeUpgrade jenkins-plugin-kubernetesUpgrade openshift-origin-cartridge-cronUpgrade libcgroupUpgrade openshift-origin-cartridge-jbossewsUpgrade openshift-origin-msg-node-mcollectiveUpgrade openshift-origin-cartridge-diyUpgrade openshift-origin-cartridge-haproxyUpgrade openshift-origin-cartridge-rubyUpgrade jenkins-plugin-openshift-pipelineUpgrade rubygem-openshift-origin-admin-console | Jun 18, 2018 | Feb 24, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub