Red Hat Security Advisory

RHSA-2020:0964

OpenShift Container Platform 3.11 jenkins-2-plugins security update

Released 2020-03-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 3.11 jenkins-2-plugins-3.11.1585050035-1.el7, jenkins-2.204.2.1585048146-1.el7

Fixes 1 record

TI-2020-02044 CVE-2020-2167 · GHSA-264w-xrr7-6qqg

Improper input validation in Jenkins OpenShift Pipeline Plugin

MEDIUM 42

Jenkins OpenShift Pipeline Plugin 1.0.56 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02077 Published 2020-03-25 Fixed in 1.0.57 CWE-20