Read the docs
Red Hat Security Advisory

RHSA-2022:1600

OpenShift Container Platform 4.10.12 security update

Released 2022-05-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 4 records

TI-2022-11602 CVE-2022-29036 · GHSA-rvg5-f5fj-mxvg

Cross-site scripting in Jenkins Credentials Plugin

Priority MEDIUM 62

Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.71926 Published 2022-04-12 Fixed in 2.6.1.1, 1074.1076.v39c30cecb_0e2 +1 CWE-79
TI-2022-11612 CVE-2022-29046 · GHSA-wpr6-qvcq-8269

Cross-site scripting in Jenkins Subversion Plugin

Priority LOW 29

Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnera…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02512 Published 2022-04-12 Fixed in 2.15.4 CWE-79
TI-2022-11607 CVE-2022-29041 · GHSA-m3p3-2gp6-ghq8

Cross-site scripting in Jenkins Jira Plugin

Priority LOW 26

Jenkins Jira Plugin 3.7 and earlier, except 3.6.1, does not escape the name and description of Jira Issue and Jira Release Version parameters on views displaying parameters, resulting in a stored cross-site scripting (XS…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00855 Published 2022-04-12 Fixed in 3.6.1, 3.7.1 CWE-79
TI-2022-10633 CVE-2022-27652 · GHSA-4hj2-r2pm-3hc6

Incorrect default permissions in cri-o

Priority LOW 24

A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00245 Published 2022-04-18 Partial fix · 1.24.0 CWE-276