The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A cross-site request forgery (CSRF) vulnerability in Jenkins Config File Provider Plugin 3.7.0 and earlier allows attackers to delete configuration files corresponding to an attacker-specified ID.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade toolboxUpgrade python-openstacksdkUpgrade python-sushyUpgrade python-kubernetesUpgrade openstack-ironicUpgrade python-keystoneauth1Upgrade python-jsonschemaUpgrade ironic-imagesUpgrade cri-oUpgrade ignitionUpgrade openshift-ansibleUpgrade python-oslo-utilsUpgrade ironic-images-ipa-x86_64Upgrade openshift-clientsUpgrade openshiftUpgrade python-oslo-dbUpgrade cri-toolsUpgrade python-oslo-policyUpgrade jenkinsUpgrade openstack-ironic-inspectorUpgrade python-debtcollectorUpgrade python-pyrsistentUpgrade python-stevedoreUpgrade python-oslo-contextUpgrade python-oslo-configUpgrade podmanUpgrade haproxyUpgrade ironic-images-ipa-ppc64leUpgrade python-oslo-logUpgrade python-oslo-serializationUpgrade runcUpgrade python-oslo-concurrencyUpgrade butaneUpgrade python-sushy-oem-idracUpgrade python-hardwareUpgrade openstack-ironic-python-agentUpgrade ostreeUpgrade kata-containersUpgrade jenkins-2-pluginsUpgrade python-ironic-libUpgrade python-openshiftUpgrade redhat-release-coreosUpgrade rust-afterburnUpgrade python-oslo-upgradecheckUpgrade python-ironic-prometheus-exporterUpgrade python-oslo-i18nUpgrade atomic-openshift-service-idlerUpgrade console-login-helper-messagesUpgrade openvswitch2.15Upgrade ovn2.13Upgrade python-eventletUpgrade python-toozUpgrade coreos-installerUpgrade openshift-kuryrUpgrade rteval-loadsUpgrade python-oslo-service | Jun 2, 2021 | Apr 21, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub