The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and groovy.util.Expando.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Jenkins 2016 02 24 | — | Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to version 1.642.2Upgrade Jenkins LTS to the latest versionUpgrade Jenkins to version 1.650 | Nov 13, 2017 | Apr 7, 2016 |
| Redhat Openshift | — | Upgrade rubygem-openshift-origin-frontend-haproxy-sni-proxyUpgrade openshift-origin-cartridge-nodejsUpgrade openshift-origin-brokerUpgrade openshift-origin-cartridge-jenkinsUpgrade openshift-origin-node-utilUpgrade openshift-origin-cartridge-jenkins-clientUpgrade openshift-origin-cartridge-phpUpgrade rubygem-openshift-origin-controllerUpgrade openshift-origin-cartridge-mongodbUpgrade openshift-origin-cartridge-perlUpgrade activemqUpgrade jenkins-plugin-credentialsUpgrade openshift-origin-broker-utilUpgrade openshift-origin-node-proxyUpgrade openshift-origin-cartridge-diyUpgrade libcgroupUpgrade jenkins-plugin-openshift-pipelineUpgrade openshift-origin-msg-node-mcollectiveUpgrade openshift-origin-cartridge-jbosseapUpgrade jenkins-plugin-durable-taskUpgrade rhcUpgrade openshift-origin-cartridge-rubyUpgrade openshift-origin-cartridge-jbossewsUpgrade rubygem-openshift-origin-routing-daemonUpgrade jenkins-plugin-kubernetesUpgrade openshift-origin-cartridge-haproxyUpgrade openshift-origin-cartridge-mysqlUpgrade openshift-origin-cartridge-pythonUpgrade rubygem-openshift-origin-admin-consoleUpgrade rubygem-openshift-origin-nodeUpgrade rubygem-openshift-origin-msg-broker-mcollectiveUpgrade openshift-origin-cartridge-cronUpgrade jenkinsUpgrade ImageMagick | Jun 18, 2018 | Feb 24, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub