Skip to content
OpenAdvisories
Medium RHEA-2017:1716 1 CVE

Red Hat Enhancement Advisory: Red Hat OpenShift Container Platform 3.6 RPM Release Advisory

Published Sep 16, 2024 · Updated May 13, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.6::el7 jenkins-plugin-script-security 0:1.29-1.el7

Vulnerabilities 1

  • Medium 6.5
    CVE-2017-1000095

    Unsafe methods in the default list of approved signatures in Jenkins Script Security Plugin

    The default whitelist included the following unsafe entries: DefaultGroovyMethods.putAt(Object, String, Object); DefaultGroovyMethods.getAt(Object, String). These allowed circumventing many of the access restrictions implemented in the script sandbox by using…

    org.jenkins-ci.plugins:script-security Maven

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1275176
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1298750
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1315962
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1365525
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1365867
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1366795
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1369914
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1373441
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1374674
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1376022
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1387149
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1388319
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1390900
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1392357
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1392519
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1393207
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1395079
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1395547
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1401134
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1402771
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1404860
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1404959
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1405307
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1409878
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1414748
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1414749
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1415839
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1419430
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1419692
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1420217
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1420280
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1421287
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1421587
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1421623
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1421643
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1421738
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1421982
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1421987
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1422271