TI-2020-10752 CVE-2020-13757 · GHSA-537h-rv9q-vvph
Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext.
Priority LOW 36
Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext.
RHSA-2020:3453
OpenShift Container Platform 4.5.6 security update
Released 2020-08-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.5 jenkins-2-plugins-4.5.1596698303-1.el7, python-rsa-4.5-1.el7, python2-rsa-4.5-1.el7
Fixes 6 records
TI-2020-02058 CVE-2020-2181 · GHSA-43j2-r4v3-m8jp
Insufficiently protected credentials in Jenkins Credentials Binding Plugin
Priority LOW 31
Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build log when the build contains no build steps.
TI-2020-02103 CVE-2020-2226 · GHSA-vr6v-wjfw-rxcr
Cross-site scripting in Jenkins Matrix Authorization Strategy Plugin
Priority LOW 26
Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration, resulting in a stored cross-site scripting vulnerability.
TI-2020-02102 CVE-2020-2225 · GHSA-w43x-5f8f-686p
Cross-site scripting in Jenkins Matrix Project Plugin
Priority LOW 26
Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes, resulting in a stored cross-site scripting vulnerability.
TI-2020-02101 CVE-2020-2224 · GHSA-h6qc-455m-7v6v
Cross-site scripting in Jenkins Matrix Project Plugin
Priority LOW 26
Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of builds with a single axis, resulting in a stored cross-site scripting vulnerability.
TI-2020-02059 CVE-2020-2182 · GHSA-7ff8-qfwx-8gx5
Insufficiently protected credentials in Jenkins Credentials Binding Plugin
Priority LOW 22
Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some circumstances.