The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker with sufficient privileges to view confidential webhook tokens.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade rubygem-minitestUpgrade rubygem-mime-typesUpgrade rubygem-kubeclientUpgrade nodejs-mimeUpgrade nodejs-js-yamlUpgrade nodejs-balanced-matchUpgrade jenkins-plugin-pipeline-stage-stepUpgrade openshift-ansibleUpgrade jenkins-plugin-workflow-basic-stepsUpgrade nodejs-sendUpgrade nodejs-acceptsUpgrade nodejs-is-relativeUpgrade jenkins-plugin-workflow-jobUpgrade python-paramikoUpgrade nodejs-client-sessionsUpgrade jenkins-plugin-openshift-loginUpgrade nodejs-msUpgrade jenkins-plugin-ace-editorUpgrade jenkins-plugin-favoriteUpgrade nodejs-dateformatUpgrade nodejs-minimatchUpgrade nodejs-basic-authUpgrade nodejs-ansi-regexUpgrade nodejs-underscore-dot-stringUpgrade nodejs-center-alignUpgrade nodejs-unpipeUpgrade ansible-kubernetes-modulesUpgrade search-guardUpgrade nodejs-asapUpgrade nodejs-mkdirpUpgrade nodejs-content-dispositionUpgrade cockpitUpgrade golang-github-openshift-oauth-proxyUpgrade nodejs-http-errorsUpgrade nodejs-grunt-legacy-log-utilsUpgrade rubygem-exconUpgrade nodejs-sprintf-jsUpgrade nodejs-lessUpgrade v8Upgrade python-rsaUpgrade nodejs-inflightUpgrade jenkins-plugin-github-apiUpgrade nodejs-base64urlUpgrade nodejs-hoekUpgrade jenkins-plugin-workflow-durable-task-stepUpgrade nodejs-on-finishedUpgrade jenkins-plugin-blueoceanUpgrade jenkinsUpgrade openshift-external-storageUpgrade nodejs-bluebirdUpgrade elasticsearch-cloud-kubernetesUpgrade jenkins-plugin-display-url-apiUpgrade openshift-elasticsearch-pluginUpgrade nodejs-tunnel-agentUpgrade jenkins-plugin-blueocean-pipeline-editorUpgrade jenkins-plugin-script-securityUpgrade nodejs-source-mapUpgrade google-cloud-sdkUpgrade sshpassUpgrade jenkins-plugin-blueocean-autofavoriteUpgrade nodejs-window-sizeUpgrade apbUpgrade nodejs-wordwrapUpgrade nodejs-utils-mergeUpgrade nodejs-readable-streamUpgrade nodejs-number-is-nanUpgrade jenkins-plugin-blueocean-github-pipelineUpgrade nodejs-inheritsUpgrade rubygem-tzinfo-dataUpgrade jenkins-plugin-githubUpgrade python-jwtUpgrade nodejs-os-localeUpgrade python-requests-oauthlibUpgrade rubygem-activesupportUpgrade nodejs-passport-oauth2Upgrade nodejs-isstreamUpgrade python-elasticsearchUpgrade nodejs-meowUpgrade mysql-apb-roleUpgrade python-certifiUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade python-botocoreUpgrade rubygem-recursive-open-structUpgrade nodejs-getobjectUpgrade rubygem-unfUpgrade rubygem-elasticsearchUpgrade nodejs-range-parserUpgrade rubygem-fluent-plugin-flatten-hashUpgrade jenkins-plugin-pipeline-build-stepUpgrade nodejs-prrUpgrade fluentdUpgrade nodejs-forwardedUpgrade python-clickUpgrade jenkins-plugin-icon-shimUpgrade nodejs-grunt-legacy-logUpgrade rubygem-fluent-mixin-config-placeholdersUpgrade nodejs-hawkUpgrade jenkins-plugin-metricsUpgrade python-typingUpgrade nodejs-coffee-scriptUpgrade nodejs-escape-string-regexpUpgrade nodejs-jsonpointerUpgrade jenkins-plugin-git-serverUpgrade nodejs-mime-dbUpgrade jenkins-plugin-workflow-cpsUpgrade containernetworking-pluginsUpgrade nodejs-repeatingUpgrade jenkins-plugin-workflow-cps-global-libUpgrade rubygem-systemd-journalUpgrade jenkins-plugin-handlebarsUpgrade nodejs-lcidUpgrade python-httplib2Upgrade nodejs-isarrayUpgrade nodejs-json-stringify-safeUpgrade jenkins-plugin-docker-workflowUpgrade nodejs-iconv-liteUpgrade nodejs-minimistUpgrade nodejs-supports-colorUpgrade jenkins-plugin-gitUpgrade nodejs-eventemitter3Upgrade nodejs-gruntUpgrade python-futuresUpgrade jenkins-plugin-workflow-remote-loaderUpgrade nodejs-concat-mapUpgrade nodejs-yargsUpgrade nodejs-lru-cacheUpgrade rubygem-concurrent-rubyUpgrade nodejs-blUpgrade rubygem-fluent-plugin-rewrite-tag-filterUpgrade dumb-initUpgrade nodejsUpgrade python-pysocksUpgrade libuvUpgrade jenkins-plugin-pipeline-rest-apiUpgrade python-libcloudUpgrade jenkins-plugin-blueocean-dashboardUpgrade nodejs-object-assignUpgrade jenkins-2-pluginsUpgrade nodejs-url-joinUpgrade nodejs-content-typeUpgrade python-setuptoolsUpgrade rubygem-i18nUpgrade nodejs-statusesUpgrade nodejs-is-windowsUpgrade nodejs-cookiesUpgrade jenkins-plugin-credentialsUpgrade nodejs-commanderUpgrade nodejs-yallistUpgrade jenkins-plugin-mapdb-apiUpgrade jenkins-plugin-blueocean-pipeline-api-implUpgrade nodejs-proxy-addrUpgrade runcUpgrade jenkins-plugin-mailerUpgrade nodejs-morganUpgrade rubygem-yajl-rubyUpgrade nodejs-cookieUpgrade jenkins-plugin-credentials-bindingUpgrade nodejs-exitUpgrade nodejs-forever-agentUpgrade python-urllib3Upgrade nodejs-combined-streamUpgrade nodejs-grunt-cliUpgrade python-botoUpgrade rubygem-http_parser.rbUpgrade nodejs-boomUpgrade haproxyUpgrade nodejs-image-sizeUpgrade rubygem-lru_reduxUpgrade rubygem-fluent-plugin-viaq_data_modelUpgrade jenkins-plugin-branch-apiUpgrade nodejs-raw-bodyUpgrade nodejs-oauthUpgrade jenkins-plugin-momentjsUpgrade nodejs-ipaddr.jsUpgrade openshift-enterprise-image-registryUpgrade jenkins-plugin-matrix-authUpgrade golang-github-prometheus-alertmanagerUpgrade nodejs-stringstreamUpgrade python-ruamel-ordereddictUpgrade jenkins-plugin-blueocean-git-pipelineUpgrade rubygem-faradayUpgrade nodejs-uid2Upgrade rubygem-mime-types-dataUpgrade jenkins-plugin-authentication-tokensUpgrade jenkins-plugin-blueocean-commonsUpgrade jenkins-plugin-jquery-detachedUpgrade nodejs-oauth-signUpgrade nodejs-is-my-json-validUpgrade rubygem-msgpackUpgrade jenkins-plugin-github-branch-sourceUpgrade nodejs-has-colorUpgrade jenkins-plugin-durable-taskUpgrade jenkins-plugin-mercurialUpgrade nodejs-grunt-legacy-utilUpgrade python-keyczarUpgrade nodejs-chalkUpgrade nodejs-brace-expansionUpgrade jenkins-plugin-pipeline-milestone-stepUpgrade jenkins-plugin-pipeline-model-declarative-agentUpgrade rubygem-resolve-hostnameUpgrade nodejs-mime-typesUpgrade nodejs-expressUpgrade jenkins-plugin-cloudbees-folderUpgrade python-google-authUpgrade nodejs-grunt-contrib-copyUpgrade rubygem-httpUpgrade nodejs-core-util-isUpgrade rubygem-netrcUpgrade nodejs-passport-http-bearerUpgrade mediawiki-apb-roleUpgrade nodejs-right-alignUpgrade python-jmespathUpgrade nodejs-requestUpgrade openvswitch-ovn-kubernetesUpgrade jenkins-plugin-pipeline-input-stepUpgrade nodejs-is-absoluteUpgrade nodejs-repeat-stringUpgrade nodejs-parse-durationUpgrade nodejs-debugUpgrade nodejs-eventemitter2Upgrade nodejs-media-typerUpgrade nodejs-wrappyUpgrade jenkins-plugin-workflow-supportUpgrade nodejs-indent-stringUpgrade nodejs-qsUpgrade nodejs-etagUpgrade jenkins-plugin-workflow-aggregatorUpgrade jenkins-plugin-junitUpgrade hawkular-openshift-agentUpgrade nodejs-requires-portUpgrade nodejs-keygripUpgrade nodejs-openshift-auth-proxyUpgrade nodejs-finalhandlerUpgrade jenkins-plugin-kubernetesUpgrade python-mockUpgrade nodejs-cookie-signatureUpgrade jenkins-plugin-pipeline-utility-stepsUpgrade nodejs-aws-sign2Upgrade rubygem-tzinfoUpgrade nodejs-varyUpgrade nodejs-escape-htmlUpgrade nodejs-errnoUpgrade nodejs-abbrevUpgrade nodejs-is-finiteUpgrade jenkins-plugin-pubsub-lightUpgrade rubygem-thread_safeUpgrade cri-oUpgrade golang-github-prometheus-node_exporterUpgrade jenkins-plugin-subversionUpgrade nodejs-array-flattenUpgrade nodejs-serve-staticUpgrade elasticsearchUpgrade nodejs-depdUpgrade nodejs-noptUpgrade nodejs-generate-object-propertyUpgrade nodejs-body-parserUpgrade thriftUpgrade nodejs-parseurlUpgrade jenkins-plugin-blueocean-configUpgrade nodejs-path-is-absoluteUpgrade rubygem-rest-clientUpgrade rubygem-fluent-plugin-docker_metadata_filterUpgrade jenkins-plugin-jackson2-apiUpgrade atomic-openshiftUpgrade python-crontabUpgrade nodejs-globUpgrade jenkins-plugin-ssh-credentialsUpgrade nodejs-path-to-regexpUpgrade rubygem-http-form_dataUpgrade jenkins-plugin-openshift-clientUpgrade nodejs-decamelizeUpgrade nodejs-pseudomapUpgrade rubygem-public_suffixUpgrade rubygem-fluent-plugin-kubernetes_metadata_filterUpgrade jenkins-plugin-blueocean-webUpgrade python-dockerUpgrade nodejs-string_decoderUpgrade python-clamdUpgrade openshift-eventrouterUpgrade nodejs-has-flagUpgrade golang-github-prometheus-prometheusUpgrade jenkins-plugin-blueocean-i18nUpgrade jenkins-plugin-variantUpgrade nodejs-on-headersUpgrade nodejs-http-signatureUpgrade rubygem-string-scrubUpgrade http-parserUpgrade rubygem-fluent-plugin-remote-syslogUpgrade nodejs-lodashUpgrade nodejs-concat-streamUpgrade nodejs-colorsUpgrade golang-github-prometheus-promuUpgrade nodejs-passport-strategyUpgrade rubygem-http-cookieUpgrade nodejs-patternflyUpgrade rubygem-cool.ioUpgrade jenkins-plugin-pipeline-stage-viewUpgrade rubygem-fluent-plugin-record-modifierUpgrade sconsUpgrade python-openshiftUpgrade rubygem-domain_nameUpgrade python-cachetoolsUpgrade jenkins-plugin-scm-apiUpgrade jenkins-plugin-workflow-scm-stepUpgrade rubygem-fluent-plugin-elasticsearchUpgrade rubygem-proxifierUpgrade nodejs-sntpUpgrade mariadb-apb-roleUpgrade python-passlibUpgrade nodejs-invert-kvUpgrade ansible-service-brokerUpgrade jenkins-plugin-docker-commonsUpgrade jenkins-plugin-structsUpgrade jenkins-plugin-git-clientUpgrade nodejs-ansi-stylesUpgrade jenkins-plugin-matrix-projectUpgrade jenkins-plugin-blueocean-display-urlUpgrade nodejs-resolveUpgrade jenkins-plugin-openshift-syncUpgrade python-cryptoUpgrade nodejs-is-propertyUpgrade python-pyUpgrade mediawiki-container-scriptsUpgrade atomic-openshift-dockerregistryUpgrade nodejs-destroyUpgrade nodejs-typedarrayUpgrade nodejs-longestUpgrade heapsterUpgrade nodejs-is-bufferUpgrade nodejs-assert-plusUpgrade nodejs-is-unc-pathUpgrade origin-kibanaUpgrade rubygem-multi_jsonUpgrade nodejs-file-sync-cmpUpgrade nodejs-rimrafUpgrade nodejs-xtendUpgrade nodejs-freshUpgrade jenkins-plugin-pipeline-model-extensionsUpgrade nodejs-generate-functionUpgrade nodejs-cliuiUpgrade nodejs-ee-firstUpgrade nodejs-form-dataUpgrade python-string_utilsUpgrade nodejs-graceful-fsUpgrade perl-IO-StringUpgrade nodejs-asyncUpgrade rubygem-docker-apiUpgrade nodejs-node-uuidUpgrade nodejs-delayed-streamUpgrade nodejs-grunt-contrib-cleanUpgrade rubygem-uuidtoolsUpgrade jenkins-plugin-multiple-scmsUpgrade ansible-asb-modulesUpgrade python-boto3Upgrade atomic-openshift-web-consoleUpgrade rubygem-fluent-plugin-secure-forwardUpgrade jenkins-plugin-openshift-pipelineUpgrade rubygem-elasticsearch-apiUpgrade rubygem-addressableUpgrade rubygem-syslog_protocolUpgrade jenkins-plugin-blueocean-restUpgrade nodejs-findup-syncUpgrade nodejs-merge-descriptorsUpgrade jenkins-plugin-pipeline-model-apiUpgrade nodejs-methodsUpgrade image-inspectorUpgrade nodejs-process-nextick-argsUpgrade nodejs-cryptilesUpgrade nodejs-har-validatorUpgrade jenkins-plugin-blueocean-jwtUpgrade nodejs-grunt-contrib-lessUpgrade jenkins-plugin-plain-credentialsUpgrade nodejs-http-proxyUpgrade nodejs-passportUpgrade nodejs-hookerUpgrade jenkins-plugin-token-macroUpgrade nodejs-strip-ansiUpgrade python-kubernetesUpgrade apb-base-scriptsUpgrade python-ruamel-yamlUpgrade nodejs-extendUpgrade nodejs-tough-cookieUpgrade rubygem-fluent-plugin-systemdUpgrade jenkins-plugin-workflow-multibranchUpgrade nodejs-util-deprecateUpgrade rubygem-multipart-postUpgrade python-s3transferUpgrade nodejs-camelcase-keysUpgrade jenkins-plugin-blueocean-eventsUpgrade jenkins-plugin-pipeline-model-definitionUpgrade nodejs-kind-ofUpgrade nodejs-map-objUpgrade jenkins-plugin-pipeline-graph-analysisUpgrade jenkins-plugin-workflow-apiUpgrade jenkins-plugin-blueocean-rest-implUpgrade nodejs-onceUpgrade nodejs-type-isUpgrade jenkins-plugin-pipeline-stage-tags-metadataUpgrade nodejs-esprimaUpgrade rubygem-elasticsearch-transportUpgrade cri-toolsUpgrade nodejs-packagingUpgrade nodejs-negotiatorUpgrade nodejs-graceful-readlinkUpgrade nodejs-whichUpgrade nodejs-caselessUpgrade rubygem-ffiUpgrade jenkins-plugin-workflow-step-apiUpgrade elastic-curatorUpgrade kibanaUpgrade nodejs-amdefineUpgrade jenkins-plugin-sse-gatewayUpgrade jenkins-plugin-blueocean-personalizationUpgrade rubygem-unf_extUpgrade nodejs-promiseUpgrade mediawiki123Upgrade nodejs-bytesUpgrade nodejs-ctypeUpgrade nodejs-has-ansiUpgrade nodejs-align-textUpgrade nodejs-y18nUpgrade nodejs-argparseUpgrade nodejs-camelcaseUpgrade nodejs-unc-path-regexUpgrade nodejs-pauseUpgrade rubygem-sigdumpUpgrade python-dictdifferUpgrade postgresql-apb-roleUpgrade nodejs-asn1Upgrade python-oauthlib | Jun 18, 2018 | Apr 11, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub