The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Jenkins 2016 02 24 | — | Upgrade Jenkins LTS to version 1.642.2Upgrade Jenkins to version 1.650Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to the latest version | Nov 13, 2017 | Apr 7, 2016 |
| Redhat Openshift | — | Upgrade openshift-origin-brokerUpgrade rubygem-openshift-origin-routing-daemonUpgrade openshift-origin-cartridge-jenkinsUpgrade openshift-origin-cartridge-mongodbUpgrade openshift-origin-cartridge-jenkins-clientUpgrade rubygem-openshift-origin-controllerUpgrade openshift-origin-node-utilUpgrade openshift-origin-cartridge-nodejsUpgrade openshift-origin-cartridge-perlUpgrade rubygem-openshift-origin-admin-consoleUpgrade activemqUpgrade openshift-origin-broker-utilUpgrade openshift-origin-node-proxyUpgrade openshift-origin-cartridge-phpUpgrade openshift-origin-cartridge-rubyUpgrade openshift-origin-cartridge-cronUpgrade jenkinsUpgrade rhcUpgrade jenkins-plugin-kubernetesUpgrade openshift-origin-msg-node-mcollectiveUpgrade openshift-origin-cartridge-jbossewsUpgrade rubygem-openshift-origin-nodeUpgrade ImageMagickUpgrade jenkins-plugin-credentialsUpgrade openshift-origin-cartridge-haproxyUpgrade jenkins-plugin-durable-taskUpgrade openshift-origin-cartridge-mysqlUpgrade libcgroupUpgrade jenkins-plugin-openshift-pipelineUpgrade rubygem-openshift-origin-msg-broker-mcollectiveUpgrade openshift-origin-cartridge-pythonUpgrade openshift-origin-cartridge-diyUpgrade openshift-origin-cartridge-jbosseapUpgrade rubygem-openshift-origin-frontend-haproxy-sni-proxy | Jun 18, 2018 | Feb 24, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub