Red Hat Security Advisory: OpenShift Developer Tools and Services for OCP 4.12 security update

Fixed packages 1

Vulnerabilities 15

• Critical 9.9
  CVE-2022-43402

  Jenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code execution

  A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Pipeline: Groovy Plugin 2802.v5ea_628154b_c2 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipe…

  Jenkins Project Jenkins Pipeline: Groovy Plugin org.jenkins-ci.plugins.workflow:workflow-cps Web / CMS Maven
  Oct 19, 2022
• Critical 9.9
  CVE-2022-43403

  Jenkins Script Security Plugin sandbox bypass vulnerability

  A sandbox bypass vulnerability involving casting an array-like value to an array type in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the…

  Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven
  Oct 19, 2022
• Critical 9.8
  CVE-2022-45047 Public exploit

  Apache MINA SSHD: Java unsafe deserialization vulnerability

  Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSH…

  Apache Software Foundation Apache MINA SSHD org.apache.sshd:sshd-common org.apache.sshd:sshd-core Maven
  Nov 16, 2022
• High 8.8
  CVE-2022-43401

  Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin

  A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier allows attackers with permission to define and run sandboxed scripts, including Pip…

  Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security org.jenkins-ci.plugins.workflow:workflow-cps Web / CMS Maven
  Oct 19, 2022
• High 8.8
  CVE-2022-43404

  Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin

  A sandbox bypass vulnerability involving crafted constructor bodies and calls to sandbox-generated synthetic constructors in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier allows attackers with permission to define and run sandboxed scripts…

  Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security org.jenkins-ci.plugins.workflow:workflow-cps Web / CMS Maven
  Oct 19, 2022
• High 8.8
  CVE-2022-43405

  Sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin and Pipeline: Deprecated Groovy Libraries Plugin

  A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da_9c54906d and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sand…

  Jenkins Project Jenkins Pipeline: Groovy Libraries Plugin org.jenkins-ci.plugins.workflow:workflow-cps-global-lib io.jenkins.plugins:pipeline-groovy-lib Web / CMS Maven
  Oct 19, 2022
• High 8.8
  CVE-2022-43406

  Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin

  A sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b_454e43966 and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypa…

  Jenkins Project Jenkins Pipeline: Deprecated Groovy Libraries Plugin org.jenkins-ci.plugins.workflow:workflow-cps-global-lib io.jenkins.plugins:pipeline-groovy-lib Web / CMS Maven
  Oct 19, 2022
• High 8.8
  CVE-2022-43407

  CSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step Plugin

  Jenkins Pipeline: Input Step Plugin 451.vf1a_a_4f405289 and earlier does not restrict or sanitize the optionally specified ID of the 'input' step, which is used for the URLs that process user interactions for the given 'input' step (proceed or abort) and is n…

  Jenkins Project Jenkins Pipeline: Input Step Plugin org.jenkins-ci.plugins:pipeline-input-step Web / CMS Maven
  Oct 19, 2022
• High 7.5
  CVE-2022-42003

  Uncontrolled Resource Consumption in Jackson-databind

  In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.

  management-api-for-apache-cassandra-5.0 com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Wolfi Maven
  Oct 2, 2022
• High 7.5
  CVE-2022-42004

  Uncontrolled Resource Consumption in FasterXML jackson-databind

  In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for des…

  management-api-for-apache-cassandra-5.0 com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Wolfi Maven
  Oct 2, 2022
• High 7.3
  CVE-2022-29047

  Untrusted users can modify some Pipeline libraries in Jenkins Pipeline: Deprecated Groovy Libraries Plugin

  Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers able to submit pull requests (or equivalent), but not able to commit directly to the configured SCM, to effectively change the Pipeline behavior…

  Jenkins Project Jenkins Pipeline: Shared Groovy Libraries Plugin org.jenkins-ci.plugins.workflow:workflow-cps-global-lib Web / CMS Maven
  Apr 12, 2022
• Medium 6.5
  CVE-2022-43408

  Jenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins

  Jenkins Pipeline: Stage View Plugin 2.26 and earlier does not correctly encode the ID of 'input' steps when using it to generate URLs to proceed or abort Pipeline builds, allowing attackers able to configure Pipelines to specify 'input' step IDs resulting in …

  Jenkins Project Jenkins Pipeline: Stage View Plugin org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view Web / CMS Maven
  Oct 19, 2022
• Medium 5.4
  CVE-2022-43409

  Stored XSS vulnerability in Jenkins Pipeline: Supporting APIs Plugin

  Jenkins Pipeline: Supporting APIs Plugin 838.va_3a_087b_4055b and earlier does not sanitize or properly encode URLs of hyperlinks sending POST requests in build logs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able…

  Jenkins Project Jenkins Pipeline: Supporting APIs Plugin org.jenkins-ci.plugins.workflow:workflow-support Web / CMS Maven
  Oct 19, 2022
• Medium 5.3
  CVE-2022-30952

  Insufficiently Protected Credentials in Jenkins Pipeline SCM API for Blue Ocean Plugin

  Jenkins Pipeline SCM API for Blue Ocean Plugin 1.25.3 and earlier allows attackers with Job/Configure permission to access credentials with attacker-specified IDs stored in the private per-user credentials stores of any attacker-specified user in Jenkins.

  Jenkins Project Jenkins Pipeline SCM API for Blue Ocean Plugin io.jenkins.blueocean:blueocean-pipeline-scm-api Web / CMS Maven
  May 17, 2022
• Medium 5.3
  CVE-2022-43410

  Webhook endpoint discloses job names to unauthorized users in Jenkins Mercurial Plugin

  Jenkins Mercurial Plugin 1251.va_b_121f184902 and earlier provides information about which jobs were triggered or scheduled for polling through its webhook endpoint, including jobs the user has no permission to access.

  Jenkins Project Jenkins Mercurial Plugin org.jenkins-ci.plugins:mercurial Web / CMS Maven
  Oct 19, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2074855
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2119645
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2135244
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2135247
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2136369
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2136370
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2136374
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2136379
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2136381
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2136382
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2136383
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2136386
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2136388
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2136391
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2145194
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1064.json
• report
  https://access.redhat.com/security/cve/CVE-2022-29047
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-29047
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-29047
• article
  https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-1951
• report
  https://access.redhat.com/security/cve/CVE-2022-30952
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-30952
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-30952
• article
  https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-714
• report
  https://access.redhat.com/security/cve/CVE-2022-42003
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-42003
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-42003
• report
  https://access.redhat.com/security/cve/CVE-2022-42004
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-42004
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-42004
• report
  https://access.redhat.com/security/cve/CVE-2022-43401
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-43401
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-43401
• article
  https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2824%20(1)
• report
  https://access.redhat.com/security/cve/CVE-2022-43402
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-43402
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-43402
• report
  https://access.redhat.com/security/cve/CVE-2022-43403