Skip to content
OpenAdvisories
Critical 1 exploited CVE RHBA-2019:0024 4 CVEs

Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update

Published Sep 16, 2024 · Updated Jan 14, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.11::el7 jenkins 0:2.138.4.1544416383-1.el7

Vulnerabilities 4

  • Critical 9.8
    CVE-2018-1000861 Exploited Public exploit Scanner template EPSS 98%

    Deserialization of Untrusted Data in Jenkins

    A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by acce…

    org.jenkins-ci.main:jenkins-core Maven
    KEV Feb 10, 2022
  • High 8.2
    CVE-2018-1000863

    Improper Limitation of a Pathname to a Restricted Directory in Jenkins

    A data modification vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in User.java, IdStrategy.java that allows attackers to submit crafted user names that can cause an improper migration of user record storage formats, potentially pr…

    org.jenkins-ci.main:jenkins-core Maven
  • Medium 6.5
    CVE-2018-1000864

    Loop with Unreachable Exit Condition in Jenkins

    A denial of service vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop.

    org.jenkins-ci.main:jenkins-core Maven
  • Medium 4.3
    CVE-2018-1000862

    Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

    An information exposure vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in DirectoryBrowserSupport.java that allows attackers with the ability to control build output to browse the file system on agents running builds beyond the dur…

    org.jenkins-ci.main:jenkins-core Maven

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1503735
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1514487
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1553070
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1566424
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1568472
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1568833
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1573128
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1605160
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1611248
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1612776
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1613438
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1614650
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1623333
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1624673
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1624998
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1625534
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1626988
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1628201
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1629716
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1631481
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1632155
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1632869
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1633504
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1634227
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1634303
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1635462
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1636914
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1638140
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1638699
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1639137
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1639201
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1640791
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1641397
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1641752
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1643417
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1644416
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1645164
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1647288
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1647793