Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact with other elements in Jenkins. The Pipeline: Build Step Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade rubygem-cool.ioUpgrade rubygem-fluent-plugin-kubernetes_metadata_filterUpgrade kibanaUpgrade rubygem-exconUpgrade jenkins-2-pluginsUpgrade fluentdUpgrade rubygem-systemd-journalUpgrade rubygem-fluent-plugin-viaq_data_modelUpgrade atomic-openshiftUpgrade rubygem-faradayUpgrade rubygem-i18n | May 7, 2019 | Jul 10, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub