Red Hat Security Advisory: OpenShift Container Platform 4.8.56 packages and security update

Fixed packages 2

Vulnerabilities 16

• High 8.8
  CVE-2022-34177

  Arbitrary file write vulnerability in Jenkins Pipeline: Input Step Plugin

  Jenkins Pipeline: Input Step Plugin 448.v37cea_9a_10a_70 and earlier archives files uploaded for `file` parameters for Pipeline `input` steps on the controller as part of build metadata, using the parameter name without sanitization as a relative path inside …

  Jenkins Project Jenkins Pipeline: Input Step Plugin org.jenkins-ci.plugins:pipeline-input-step Web / CMS Maven
  Jun 22, 2022
• High 8.0
  CVE-2022-34176 EPSS 78%

  Cross-site Scripting in Jenkins JUnit Plugin

  Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.

  Jenkins Project Jenkins JUnit Plugin org.jenkins-ci.plugins:junit Web / CMS Maven
  Jun 22, 2022
• High 7.5
  CVE-2022-2048

  Jetty vulnerable to Invalid HTTP/2 requests that can lead to denial of service

  In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario w…

  The Eclipse Foundation Eclipse Jetty jetty9 jenkins Debian Ubuntu Alpine Maven
  Jul 7, 2022
• High 7.5
  CVE-2022-30945

  Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Jenkins Pipeline: Groovy Plugin

  Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and earlier allows loading any Groovy source files on the classpath of Jenkins and Jenkins plugins in sandboxed pipelines.

  Jenkins Project Jenkins Pipeline: Groovy Plugin org.jenkins-ci.plugins.workflow:workflow-cps Web / CMS Maven
  May 17, 2022
• High 7.3
  CVE-2022-29047

  Untrusted users can modify some Pipeline libraries in Jenkins Pipeline: Deprecated Groovy Libraries Plugin

  Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers able to submit pull requests (or equivalent), but not able to commit directly to the configured SCM, to effectively change the Pipeline behavior…

  Jenkins Project Jenkins Pipeline: Shared Groovy Libraries Plugin org.jenkins-ci.plugins.workflow:workflow-cps-global-lib Web / CMS Maven
  Apr 12, 2022
• Medium 6.5
  CVE-2022-36882

  Lack of authentication mechanism in Jenkins Git Plugin webhook

  A cross-site request forgery (CSRF) vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit.

  Jenkins Project Jenkins Git Plugin git org.jenkins-ci.plugins:git Web / CMS Azure Linux Maven
  Jul 27, 2022
• Medium 6.5
  CVE-2022-36883 Public exploit Scanner template

  Lack of authentication mechanism in Jenkins Git Plugin webhook

  A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit.

  Jenkins Project Jenkins Git Plugin git org.jenkins-ci.plugins:git Web / CMS Azure Linux Maven
  Jul 27, 2022
• Medium 5.3
  CVE-2022-30952

  Insufficiently Protected Credentials in Jenkins Pipeline SCM API for Blue Ocean Plugin

  Jenkins Pipeline SCM API for Blue Ocean Plugin 1.25.3 and earlier allows attackers with Job/Configure permission to access credentials with attacker-specified IDs stored in the private per-user credentials stores of any attacker-specified user in Jenkins.

  Jenkins Project Jenkins Pipeline SCM API for Blue Ocean Plugin io.jenkins.blueocean:blueocean-pipeline-scm-api Web / CMS Maven
  May 17, 2022
• Medium 5.3
  CVE-2022-34174

  Observable timing discrepancy allows determining username validity in Jenkins

  In Jenkins 2.355 and earlier, LTS 2.332.3 and earlier, an observable timing discrepancy on the login form allows distinguishing between login attempts with an invalid username, and login attempts with a valid username and wrong password, when using the Jenkin…

  Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core jenkins Web / CMS Alpine Maven
  Jun 22, 2022
• Medium 5.3
  CVE-2022-36884

  Lack of authentication mechanism in Jenkins Git Plugin webhook

  The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs configured to use an attacker-specified Git repository.

  Jenkins Project Jenkins Git Plugin git org.jenkins-ci.plugins:git Web / CMS Azure Linux Maven
  Jul 27, 2022
• Medium 4.8
  CVE-2022-36881

  Jenkins Git client plugin 3.11.0 does not perform SSH host key verification

  Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git repositories via SSH, enabling man-in-the-middle attacks.

  Jenkins Project Jenkins Git client Plugin org.jenkins-ci.plugins:git-client Web / CMS Maven
  Jul 27, 2022
• Medium 4.3
  CVE-2022-30946

  CSRF vulnerability in Jenkins Script Security Plugin

  A cross-site request forgery (CSRF) vulnerability in Jenkins Script Security Plugin 1158.v7c1b_73a_69a_08 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver.

  Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven
  May 17, 2022
• Medium 4.3
  CVE-2022-30953

  Cross Site Request Forgery in Jenkins Blue Ocean Plugin

  A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier allows attackers to connect to an attacker-specified HTTP server.

  Jenkins Project Jenkins Blue Ocean Plugin io.jenkins.blueocean:blueocean-parent Web / CMS Maven
  May 17, 2022
• Medium 4.3
  CVE-2022-30954

  Missing permission check in Jenkins Blue Ocean Plugin

  Jenkins Blue Ocean Plugin 1.25.3 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP server.

  Jenkins Project Jenkins Blue Ocean Plugin io.jenkins.blueocean:blueocean-parent Web / CMS Maven
  May 17, 2022
• Low 3.7
  CVE-2022-30948

  Path traversal in Jenkins Mercurial Plugin

  Jenkins Mercurial Plugin 2.16 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM con…

  Jenkins Project Jenkins Mercurial Plugin org.jenkins-ci.plugins:mercurial Web / CMS Maven
  May 17, 2022
• Low 3.1
  CVE-2022-36885

  Jenkins GitHub plugin uses weak webhook signature function

  Jenkins GitHub Plugin 1.34.4 and earlier uses a non-constant time comparison function when checking whether the provided and computed webhook signatures are equal, allowing attackers to use statistical methods to obtain a valid webhook signature.

  Jenkins Project Jenkins GitHub Plugin com.coravy.hudson.plugins.github:github Web / CMS Maven
  Jul 27, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2074855
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2103548
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2103551
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2114755
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2116840
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2116952
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2119642
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2119643
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2119644
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2119645
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2119646
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2119647
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2119653
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2119656
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2119657
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2119658
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0017.json
• report
  https://access.redhat.com/security/cve/CVE-2022-2048
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2048
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2048
• article
  https://github.com/eclipse/jetty.project/security/advisories/GHSA-wgmr-mf83-7x4j
• report
  https://access.redhat.com/security/cve/CVE-2022-29047
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-29047
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-29047
• article
  https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-1951
• report
  https://access.redhat.com/security/cve/CVE-2022-30945
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-30945
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-30945
• article
  https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-359
• report
  https://access.redhat.com/security/cve/CVE-2022-30946
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-30946
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-30946
• article
  https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2116
• report
  https://access.redhat.com/security/cve/CVE-2022-30948
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-30948
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-30948
• article
  https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2478
• report
  https://access.redhat.com/security/cve/CVE-2022-30952