Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix update

Fixed packages 41

Vulnerabilities 16

• High 8.8
  CVE-2018-1000865

  Improper Privilege Management in Jenkins

  A sandbox bypass vulnerability exists in Script Security Plugin 1.47 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins ma…

  org.jenkins-ci.plugins:script-security Maven
  Dec 10, 2018
• High 8.8
  CVE-2018-1000866

  Jenkins Script Security and Pipeline Groovy Plugins Sandbox Bypass

  A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.59 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java, groovy-cps/lib/src/main/java/com/cloudbees/groovy/cps/SandboxCpsTransformer.java that allows …

  org.jenkins-ci.plugins:script-security org.jenkins-ci.plugins.workflow:workflow-cps Maven
  Dec 10, 2018
• High 8.8
  CVE-2019-1003000 Public exploit Scanner template EPSS 98%

  Protection Mechanism Failure in Jenkins Script Security Plugin

  A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java that allows attackers with the ability to provide sandboxed scripts to execute arbitrary c…

  Jenkins Project Script Security Plugin org.jenkins-ci.plugins:script-security Maven
  Jan 22, 2019
• High 8.8
  CVE-2019-1003001 Public exploit EPSS 86%

  Jenkins Groovy Plugin sandbox bypass vulnerability

  A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.61 and earlier in src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowDefinition.java, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShellFactory.java that allows attackers wit…

  Jenkins Project Pipeline: Groovy Plugin org.jenkins-ci.plugins:script-security org.jenkins-ci.plugins.workflow:workflow-cps-parent Maven
  Jan 22, 2019
• High 8.8
  CVE-2019-1003002 Public exploit EPSS 81%

  Jenkins Pipeline Declarative Plugin sandbox bypass vulnerability

  A sandbox bypass vulnerability exists in Pipeline: Declarative Plugin 1.3.3 and earlier in pipeline-model-definition/src/main/groovy/org/jenkinsci/plugins/pipeline/modeldefinition/parser/Converter.groovy that allows attackers with Overall/Read permission to p…

  Jenkins Project Pipeline: Declarative Plugin org.jenkinsci.plugins:pipeline-model-definition Maven
  Jan 22, 2019
• High 7.2
  CVE-2019-1003003

  Improper Authorization in Jenkins Core

  An improper authorization vulnerability exists in Jenkins 2.158 and earlier, LTS 2.150.1 and earlier in core/src/main/java/hudson/security/TokenBasedRememberMeServices2.java that allows attackers with Overall/RunScripts permission to craft Remember Me cookies…

  Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  Jan 22, 2019
• High 7.2
  CVE-2019-1003004

  Improper Authorization in Jenkins Core

  An improper authorization vulnerability exists in Jenkins 2.158 and earlier, LTS 2.150.1 and earlier in core/src/main/java/hudson/security/AuthenticationProcessingFilter2.java that allows attackers to extend the duration of active HTTP sessions indefinitely e…

  Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  Jan 22, 2019
• Medium 6.5
  CVE-2019-1003011

  Jenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS

  An information exposure and denial of service vulnerability exists in Jenkins Token Macro Plugin 2.5 and earlier in src/main/java/org/jenkinsci/plugins/tokenmacro/Parser.java, src/main/java/org/jenkinsci/plugins/tokenmacro/TokenMacro.java, src/main/java/org/j…

  Jenkins Project Jenkins Token Macro Plugin org.jenkins-ci.plugins:token-macro Web / CMS Maven
  Feb 6, 2019
• Medium 6.5
  CVE-2019-1003012

  Cross-Site Request Forgery in Jenkins Blue Ocean Plugin

  A data modification vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-core-js/src/js/bundleStartup.js, blueocean-core-js/src/js/fetch.ts, blueocean-core-js/src/js/i18n/i18n.js, blueocean-core-js/src/js/urlconfig.js, blueocean-…

  Jenkins Project Jenkins Blue Ocean Plugins io.jenkins.blueocean:blueocean Web / CMS Maven
  Feb 6, 2019
• Medium 6.1
  CVE-2019-3826

  A stored, DOM based, cross-site scripting (XSS) flaw was found in Prometheus before version 2.7.1. An attacker could ex…

  [UNKNOWN] prometheus prometheus prometheus Debian Ubuntu
  Mar 26, 2019
• Medium 5.4
  CVE-2019-1003013

  Cross-site Scripting in Jenkins Blue Ocean Plugin

  An cross-site scripting vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-commons/src/main/java/io/jenkins/blueocean/commons/stapler/Export.java, blueocean-commons/src/main/java/io/jenkins/blueocean/commons/stapler/export/Expo…

  Jenkins Project Jenkins Blue Ocean Plugins io.jenkins.blueocean:blueocean Web / CMS Maven
  Feb 6, 2019
• Medium 4.8
  CVE-2019-1003014

  Jenkins Config File Provider Plugin XSS vulnerability

  An cross-site scripting vulnerability exists in Jenkins Config File Provider Plugin 3.4.1 and earlier in src/main/resources/lib/configfiles/configfiles.jelly that allows attackers with permission to define shared configuration files to execute arbitrary JavaS…

  Jenkins Project Jenkins Config File Provider Plugin org.jenkins-ci.plugins:config-file-provider Web / CMS Maven
  Feb 6, 2019
• Medium 4.3
  CVE-2019-1003010

  Cross-Site Request Forgery in Jenkins Git Plugin

  A cross-site request forgery vulnerability exists in Jenkins Git Plugin 3.9.1 and earlier in src/main/java/hudson/plugins/git/GitTagAction.java that allows attackers to create a Git tag in a workspace and attach corresponding metadata to a build record.

  git org.jenkins-ci.plugins:git Azure Linux Maven
  Feb 6, 2019
• Unscored —
  CVE-2018-20102

  An out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8.14. Due to a missing …

  haproxy haproxy Debian Ubuntu
  Dec 12, 2018
• Unscored —
  CVE-2018-20103

  An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can t…

  haproxy haproxy Debian Ubuntu
  Dec 12, 2018
• Unscored —
  CVE-2018-20615

  An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 whic…

  haproxy haproxy Debian Ubuntu
  Mar 18, 2019

References

• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1506736
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1598822
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1615719
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623338
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1634302
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1635254
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1635613
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1642379
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1642929
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1651090
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1651632
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1655183
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1657019
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1659194
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1659441
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1659653
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1659976
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1660598
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1664753
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1665235
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1666820
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1667270
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1667618
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1668412
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1668828
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1668970
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1669019
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1669194
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1669439
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1669555
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1669984
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1670551
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1673178
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_0326.json
• report
  https://access.redhat.com/security/cve/CVE-2018-20102
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1658874
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-20102
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-20102
• article
  https://www.mail-archive.com/haproxy@formilux.org/msg32055.html