Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,139

Export CSV
CVE-2020-2134

jenkins-script-security-plugin: sandbox protection bypass via crafted constructor calls and crafted constructor bodies

Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted constructor calls and crafted constructor bodies.

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed
Vendors
Jenkins Redhat
Products
Script Security Openshift
CVE-2020-2111

jenkins-subversion-plugin: XSS in project repository base url

Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field form validation, resulting in a stored cross-site scripting vulnerability.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Subversion Openshift
CVE-2020-2110

jenkins-script-security-plugin: sandbox protection bypass during script compilation phase by applying AST transforming annotations

Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilation phase by applying AST transforming annotations to imports or by using them inside of other annotations.

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Jenkins Redhat
Products
Script Security Openshift
CVE-2020-2109

jenkins-pipeline-groovy-plugin: sandbox protection bypass through default parameter expressions in CPS-transformed methods

Sandbox protection in Jenkins Pipeline: Groovy Plugin 2.78 and earlier can be circumvented through default parameter expressions in CPS-transformed methods.

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Jenkins Redhat
Products
Pipeline\ Openshift
CVE-2020-2105

jenkins: REST APIs vulnerable to clickjacking

REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks.

CVSS 3.1 · 5.4 Medium EPSS 1.8% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2020-2104

jenkins: Memory usage graphs accessible to anyone with Overall/Read

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier allowed users with Overall/Read access to view a JVM memory usage chart.

CVSS 3.1 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2020-2103

jenkins: Exposed session identifiers on user detail object in the whoAmI diagnostic page

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier exposed session identifiers on a user's detail object in the whoAmI diagnostic page.

CVSS 3.1 · 5.4 Medium EPSS 7.0% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2020-2102

jenkins: Non-constant time HMAC comparison

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier used a non-constant time comparison function when validating an HMAC.

CVSS 3.1 · 5.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2020-2101

jenkins: Non-constant time comparison of inbound TCP agent connection secret

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack to obtain this secret.

CVSS 3.1 · 5.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2020-2100

jenkins: UDP multicast/broadcast service amplification reflection attack

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848.

CVSS 3.1 · 5.8 Medium EPSS 3.4% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2020-2099

jenkins: Inbound TCP Agent Protocol/3 authentication bypass

Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the Inbound TCP Agent Protocol/3, allowing unauthorized attackers with knowledge of agent names to obtain the connection secrets for those agents, which can be used to connect to Jenkins, impersonating those agents.

CVSS 3.1 · 8.6 High EPSS 1.0% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2020-29652

golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Golang Redhat
Products
Ssh Container Native Virtualization Enterprise Linux and 1 more
CVE-2020-28852

golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag

In x/text in Go before v0.3.5, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Golang Redhat
Products
Text Acm Enterprise Linux and 2 more
CVE-2020-28851

golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension

In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Golang Redhat
Products
Go Acm Enterprise Linux and 2 more
CVE-2020-27846

crewjam/saml: authentication bypass in saml authentication

A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CVSS 3.1 · 9.8 Critical EPSS 4.9% KEV · Not listed
Vendors
Fedoraproject Grafana Redhat and 1 more
Products
Fedora Grafana Enterprise Linux and 4 more
CVE-2020-27836

cluster-ingress-operator: changes to loadBalancerSourceRanges overwritten by operator

A flaw was found in cluster-ingress-operator. A change to how the router-default service allows only certain IP source ranges could allow an attacker to access resources that would otherwise be restricted to specified IP ranges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability..

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Openshift Openshift Container Platform
CVE-2020-27833

openshift/oc: zip slip - arbitrary file write vulnerability / arbitrary code execution using a specially crafted container image

A Zip Slip vulnerability was found in the oc binary in openshift-clients where an arbitrary file write is achieved by using a specially crafted raw container image (.tar file) which contains symbolic links. The vulnerability is limited to the command `oc image extract`. If a symbolic link is first created pointing within the tarball, this allows further symbolic links to bypass the existing path check. This flaw allows the tarball to create links outside the tarball's parent directory, allowing for executables or configuration files to be overwritten, resulting in arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Versions up to and including openshift-clients-4.7.0-202104250659.p0.git.95881af are affected.

CVSS 3.1 · 7.1 High EPSS 1.7% KEV · Not listed
Vendors
Redhat
Products
Openshift Container Platform