Red Hat Security Advisory

RHSA-2024:5406

Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update

Released 2024-08-14 · Red Hat rating Critical · View on Red Hat →

Fixed in

OpenShift Developer Tools and Services for OCP 4.13 jenkins-2-plugins-4.13.1723446018-1.el8, jenkins-2.462.1.1723445923-3.el8

Fixes 1 record

TI-2024-28733 CVE-2024-43044 · GHSA-h856-ffvv-xvr4

Improper check for unusual conditions in Jenkins

MEDIUM 61

Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by using the `ClassLoaderProxy#fetchJar` method in the Remoting library.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.28782 Published 2024-08-07 Partial fix · 2.452.4, 2.462.1 +4 CWE-754