The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints, allowing attackers with global Job/Configure permission to enumerate system-scoped credentials IDs of credentials stored in Jenkins.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade openshift-kuryrUpgrade jenkins-2-pluginsUpgrade openvswitch2.15Upgrade python-kubernetesUpgrade openstack-ironic-inspectorUpgrade atomic-openshift-service-idlerUpgrade python-pyrsistentUpgrade python-oslo-i18nUpgrade python-oslo-policyUpgrade python-oslo-dbUpgrade python-oslo-utilsUpgrade ironic-imagesUpgrade python-oslo-serviceUpgrade python-debtcollectorUpgrade openshiftUpgrade ignitionUpgrade python-oslo-configUpgrade ovn2.13Upgrade haproxyUpgrade openshift-ansibleUpgrade python-oslo-concurrencyUpgrade python-openstacksdkUpgrade podmanUpgrade ironic-images-ipa-ppc64leUpgrade python-oslo-upgradecheckUpgrade python-ironic-prometheus-exporterUpgrade ironic-images-ipa-x86_64Upgrade jenkinsUpgrade python-oslo-logUpgrade coreos-installerUpgrade rteval-loadsUpgrade python-keystoneauth1Upgrade rust-afterburnUpgrade runcUpgrade python-openshiftUpgrade python-jsonschemaUpgrade console-login-helper-messagesUpgrade python-oslo-contextUpgrade python-eventletUpgrade cri-oUpgrade openstack-ironicUpgrade redhat-release-coreosUpgrade cri-toolsUpgrade openstack-ironic-python-agentUpgrade python-sushyUpgrade python-ironic-libUpgrade kata-containersUpgrade python-stevedoreUpgrade python-toozUpgrade python-hardwareUpgrade python-oslo-serializationUpgrade toolboxUpgrade python-sushy-oem-idracUpgrade openshift-clientsUpgrade ostreeUpgrade butane | Jun 2, 2021 | Apr 21, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub