Red Hat Security Advisory

RHSA-2022:4947

OpenShift Container Platform 4.6.59 security update

Released 2022-06-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.6 conmon-2:2.0.21-3.rhaos4.6.el7, conmon-2:2.0.21-3.rhaos4.6.el8, cri-o-1.19.7-2.rhaos4.6.git3c20b65.el7 +2

Fixes 3 records

TI-2022-11602 CVE-2022-29036 · GHSA-rvg5-f5fj-mxvg

Cross-site scripting in Jenkins Credentials Plugin

MEDIUM 62

Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.71926 Published 2022-04-12 Fixed in 2.6.1.1, 1074.1076.v39c30cecb_0e2 +1 CWE-79

TI-2022-01574 CVE-2022-1708 · GHSA-fcm2-6c3h-pg6j

Uncontrolled resource consumption in CRI-O

LOW 39

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03165 Published 2022-06-07 Partial fix · 1.24.1, 1.23.3 +1 CWE-400

TI-2022-11612 CVE-2022-29046 · GHSA-wpr6-qvcq-8269

Cross-site scripting in Jenkins Subversion Plugin

LOW 29

Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnera…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02512 Published 2022-04-12 Fixed in 2.15.4 CWE-79