The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Jenkins Config File Provider Plugin 3.7.0 and earlier does not perform permission checks in several HTTP endpoints, attackers with Overall/Read permission to enumerate configuration file IDs.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade python-oslo-utilsUpgrade cri-oUpgrade coreos-installerUpgrade openstack-ironicUpgrade rust-afterburnUpgrade python-ironic-libUpgrade python-kubernetesUpgrade openstack-ironic-inspectorUpgrade toolboxUpgrade python-oslo-serviceUpgrade python-sushy-oem-idracUpgrade haproxyUpgrade openvswitch2.15Upgrade ignitionUpgrade kata-containersUpgrade python-oslo-serializationUpgrade python-stevedoreUpgrade redhat-release-coreosUpgrade python-sushyUpgrade ironic-imagesUpgrade python-oslo-contextUpgrade python-keystoneauth1Upgrade ironic-images-ipa-ppc64leUpgrade rteval-loadsUpgrade console-login-helper-messagesUpgrade openstack-ironic-python-agentUpgrade python-pyrsistentUpgrade cri-toolsUpgrade python-oslo-upgradecheckUpgrade ostreeUpgrade python-jsonschemaUpgrade python-openshiftUpgrade python-openstacksdkUpgrade python-debtcollectorUpgrade python-hardwareUpgrade python-toozUpgrade openshift-ansibleUpgrade python-oslo-policyUpgrade python-ironic-prometheus-exporterUpgrade podmanUpgrade openshift-kuryrUpgrade ovn2.13Upgrade python-eventletUpgrade atomic-openshift-service-idlerUpgrade python-oslo-concurrencyUpgrade jenkins-2-pluginsUpgrade ironic-images-ipa-x86_64Upgrade python-oslo-logUpgrade runcUpgrade python-oslo-dbUpgrade jenkinsUpgrade python-oslo-i18nUpgrade openshiftUpgrade butaneUpgrade python-oslo-config | Jun 2, 2021 | Apr 21, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub