Red Hat Security Advisory: OpenShift Container Platform 3.11.462 bug fix and security update

Fixed packages 2

Vulnerabilities 7

• High 8.1
  CVE-2021-21642 EPSS 38%

  XML External Entity Reference vulnerability in Jenkins Config File Provider Plugin

  Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

  Jenkins Project Jenkins Config File Provider Plugin org.jenkins-ci.plugins:config-file-provider Web / CMS Maven
  Apr 21, 2021
• High 7.0
  CVE-2020-27216

  Local Temp Directory Hijacking Vulnerability

  In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the pr…

  The Eclipse Foundation Eclipse Jetty jetty9 jetty9 Debian Ubuntu Maven
  Oct 23, 2020
• Medium 6.5
  CVE-2021-21643

  Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs

  Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints, allowing attackers with global Job/Configure permission to enumerate system-scoped credentials IDs of credentials stored in Jenkins.

  Jenkins Project Jenkins Config File Provider Plugin org.jenkins-ci.plugins:config-file-provider Web / CMS Maven
  Apr 21, 2021
• Medium 5.4
  CVE-2021-21644

  CSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files

  A cross-site request forgery (CSRF) vulnerability in Jenkins Config File Provider Plugin 3.7.0 and earlier allows attackers to delete configuration files corresponding to an attacker-specified ID.

  Jenkins Project Jenkins Config File Provider Plugin org.jenkins-ci.plugins:config-file-provider Web / CMS Maven
  Apr 21, 2021
• Medium 5.2
  CVE-2020-27223 Public exploit EPSS 78%

  DOS vulnerability for Quoted Quality CSV headers

  In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due…

  The Eclipse Foundation Eclipse Jetty jetty9 jetty9 Debian Ubuntu Maven
  Feb 26, 2021
• Medium 4.8
  CVE-2020-27218

  Buffer not correctly recycled in Gzip Request inflation

  In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacke…

  The Eclipse Foundation Eclipse Jetty jetty9 org.eclipse.jetty:jetty-server Debian Ubuntu Maven
  Nov 28, 2020
• Medium 4.3
  CVE-2021-21645

  Missing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs

  Jenkins Config File Provider Plugin 3.7.0 and earlier does not perform permission checks in several HTTP endpoints, attackers with Overall/Read permission to enumerate configuration file IDs.

  Jenkins Project Jenkins Config File Provider Plugin org.jenkins-ci.plugins:config-file-provider Web / CMS Maven
  Apr 21, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1891132
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1902826
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1929718
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1934116
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1944916
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1952146
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1952148
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1952151
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1952152
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1962884
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1965827
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1973109
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1973123
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1974623
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2517.json
• report
  https://access.redhat.com/security/cve/CVE-2020-27216
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-27216
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-27216
• article
  https://github.com/eclipse/jetty.project/security/advisories/GHSA-g3wg-6mcf-8jj6#advisory-comment-63053
• report
  https://access.redhat.com/security/cve/CVE-2020-27218
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-27218
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-27218
• article
  https://github.com/eclipse/jetty.project/security/advisories/GHSA-86wm-rrjm-8wh8
• report
  https://access.redhat.com/security/cve/CVE-2020-27223
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-27223
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-27223
• article
  https://github.com/eclipse/jetty.project/security/advisories/GHSA-m394-8rww-3jr7
• report
  https://access.redhat.com/security/cve/CVE-2021-21642
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-21642
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-21642
• article
  https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2204
• report
  https://access.redhat.com/security/cve/CVE-2021-21643
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-21643
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-21643
• article
  https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2254
• report
  https://access.redhat.com/security/cve/CVE-2021-21644
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-21644
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-21644