CVE-2013-6372

Jenkins: insecure storage of passwords in Subversion plugin (SECURITY-58)

The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Jenkins-ci Redhat

Products

Subversion-plugin Openshift

CVE-2015-7539

jenkins: Jenkins plugin manager vulnerable to MITM attacks (SECURITY-234)

The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted plugin.

CVSS 3.0 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2015-7538

jenkins: CSRF protection ineffective (SECURITY-233)

Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors.

CVSS 3.0 · 8.8 High EPSS 2.2% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2015-7537

jenkins: CSRF vulnerability in some administrative actions (SECURITY-225)

Cross-site request forgery (CSRF) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via vectors related to the HTTP GET method.

CVSS 3.0 · 8.8 High EPSS 2.4% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2015-7528

OpenShift: pod log location must validate container if provided

Kubernetes before 1.2.0-alpha.5 allows remote attackers to read arbitrary pod logs via a container name.

CVSS 3.0 · 5.3 Medium EPSS 2.1% KEV · Not listed

Vendors

Kubernetes Redhat

Products

Kubernetes Openshift

CVE-2015-5326

jenkins: Stored XSS vulnerability in slave offline status message (SECURITY-214)

Cross-site scripting (XSS) vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2015-5325

jenkins: JNLP slaves not subject to slave-to-master access control (SECURITY-206)

Jenkins before 1.638 and LTS before 1.625.2 allow attackers to bypass intended slave-to-master access restrictions by leveraging a JNLP slave. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3665.

CVSS 2.0 · 7.5 High EPSS 1.8% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2015-5324

jenkins: Queue API did show items not visible to the current user (SECURITY-186)

Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to queue/api.

CVSS 2.0 · 5.0 Medium EPSS 2.1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2015-5323

jenkins: API tokens of other users available to admins (SECURITY-200)

Jenkins before 1.638 and LTS before 1.625.2 do not properly restrict access to API tokens which might allow remote administrators to gain privileges and run scripts by using an API token of another user.

CVSS 2.0 · 6.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2015-5322

jenkins: Local file inclusion vulnerability (SECURITY-195)

Directory traversal vulnerability in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to list directory contents and read arbitrary files in the Jenkins servlet resources via directory traversal sequences in a request to jnlpJars/.

CVSS 2.0 · 5.0 Medium EPSS 3.2% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2015-5321

jenkins: Information disclosure via sidepanel (SECURITY-192)

The sidepanel widgets in the CLI command overview and help pages in Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to the pages.

CVSS 2.0 · 5.0 Medium EPSS 2.1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2015-5320

jenkins: Secret key not verified when connecting a slave (SECURITY-184)

Jenkins before 1.638 and LTS before 1.625.2 do not properly verify the shared secret used in JNLP slave connections, which allows remote attackers to connect as slaves and obtain sensitive information or possibly gain administrative access by leveraging knowledge of the name of a slave.

CVSS 2.0 · 5.0 Medium EPSS 2.1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2015-5318

jenkins: Public value used for CSRF protection salt (SECURITY-169)

Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible salt to generate CSRF protection tokens, which makes it easier for remote attackers to bypass the CSRF protection mechanism via a brute force attack.

CVSS 2.0 · 6.8 Medium EPSS 1.2% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2015-5319

jenkins: XXE injection into job configurations via CLI (SECURITY-173)

XML external entity (XXE) vulnerability in the create-job CLI command in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to read arbitrary files via a crafted job configuration that is then used in an "XML-aware tool," as demonstrated by get-job and update-job.

CVSS 2.0 · 5.0 Medium EPSS 2.3% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Openshift

CVE-2021-4238

Insufficient randomness in github.com/Masterminds/goutils

Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9. This significantly reduces the amount of entropy in short strings generated by these functions.

CVSS 3.1 · 9.1 Critical EPSS 1.4% KEV · Not listed

Vendors

Goutils Project Redhat

Products

Goutils Openshift Openshift Data Foundation and 2 more

CVE-2021-4235

Denial of service in gopkg.in/yaml.v2

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Redhat Yaml Project

Products

Openshift Openshift Data Foundation Yaml

CVE-2022-46174

Race condition during concurrent TLS mounts in efs-utils

efs-utils is a set of Utilities for Amazon Elastic File System (EFS). A potential race condition issue exists within the Amazon EFS mount helper in efs-utils versions v1.34.3 and below. When using TLS to mount file systems, the mount helper allocates a local port for stunnel to receive NFS connections prior to applying the TLS tunnel. In affected versions, concurrent mount operations can allocate the same local port, leading to either failed mount operations or an inappropriate mapping from an EFS customer’s local mount points to that customer’s EFS file systems. This issue is patched in version v1.34.4. There is no recommended work around. We recommend affected users update the installed version of efs-utils to v1.34.4 or later.

CVSS 3.1 · 4.2 Medium EPSS < 1% KEV · Not listed

Vendors

Amazon Redhat

Products

Efs-utils Elastic File System Container Storage Interface Driver Openshift

CVE-2013-4152

Framework: XML External Entity (XXE) injection flaw

The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via an XML external entity declaration in conjunction with an entity reference in a (1) DOMSource, (2) StAXSource, (3) SAXSource, or (4) StreamSource, aka an XML External Entity (XXE) issue.

CVSS 2.0 · 6.8 Medium EPSS 25.6% KEV · Not listed

Vendors

Redhat Springsource Vmware

Products

Jboss Amq Jboss Enterprise Soa Platform Jboss Fuse and 3 more

CVE-2013-0164

openshift-origin-port-proxy: openshift-port-proxy-cfg lockwrap() tmp file creation

The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Openshift Openshift Origin

CVE-2013-4136

rubygem-passenger: insecure temporary directory usage due to reuse of existing server instance directories

ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of arbitrary directories via a symlink attack on a directory with a predictable name in /tmp/.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Phusion Redhat Ruby-lang

Products

Passenger Openshift Ruby