Action not permitted
Modal body text goes here.
CVE-2018-17246
Vulnerability from cvelistv5
▼ | URL | Tags | |
---|---|---|---|
bressers@elastic.co | http://www.securityfocus.com/bid/106285 | Third Party Advisory, VDB Entry | |
bressers@elastic.co | https://access.redhat.com/errata/RHBA-2018:3743 | Third Party Advisory | |
bressers@elastic.co | https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594 | Vendor Advisory | |
bressers@elastic.co | https://www.elastic.co/community/security | Vendor Advisory |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T10:47:04.056Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "106285", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/106285" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594" }, { "name": "RHBA-2018:3743", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHBA-2018:3743" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://www.elastic.co/community/security" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Kibana", "vendor": "Elastic", "versions": [ { "status": "affected", "version": "before 6.4.3 and 5.6.13" } ] } ], "datePublic": "2018-12-20T00:00:00", "descriptions": [ { "lang": "en", "value": "Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system." } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-73", "description": "CWE-73: External Control of File Name or Path", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2019-03-13T09:57:01", "orgId": "271b6943-45a9-4f3a-ab4e-976f3fa05b5a", "shortName": "elastic" }, "references": [ { "name": "106285", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/106285" }, { "tags": [ "x_refsource_MISC" ], "url": "https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594" }, { "name": "RHBA-2018:3743", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHBA-2018:3743" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://www.elastic.co/community/security" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "security@elastic.co", "ID": "CVE-2018-17246", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Kibana", "version": { "version_data": [ { "version_value": "before 6.4.3 and 5.6.13" } ] } } ] }, "vendor_name": "Elastic" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-73: External Control of File Name or Path" } ] } ] }, "references": { "reference_data": [ { "name": "106285", "refsource": "BID", "url": "http://www.securityfocus.com/bid/106285" }, { "name": "https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594", "refsource": "MISC", "url": "https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594" }, { "name": "RHBA-2018:3743", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHBA-2018:3743" }, { "name": "https://www.elastic.co/community/security", "refsource": "CONFIRM", "url": "https://www.elastic.co/community/security" } ] } } } }, "cveMetadata": { "assignerOrgId": "271b6943-45a9-4f3a-ab4e-976f3fa05b5a", "assignerShortName": "elastic", "cveId": "CVE-2018-17246", "datePublished": "2018-12-20T22:00:00", "dateReserved": "2018-09-20T00:00:00", "dateUpdated": "2024-08-05T10:47:04.056Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2018-17246\",\"sourceIdentifier\":\"bressers@elastic.co\",\"published\":\"2018-12-20T22:29:00.367\",\"lastModified\":\"2020-08-14T17:30:58.793\",\"vulnStatus\":\"Modified\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.\"},{\"lang\":\"es\",\"value\":\"Kibana, en versiones anteriores a la 6.4.3 y la 5.6.13, contiene un error de inclusi\u00f3n de archivos arbitrarios en el plugin Console. Un atacante con acceso a la API de la consola de Kibana podr\u00eda enviar una petici\u00f3n que intentar\u00e1 ejecutar c\u00f3digo JavaScript. Esto podr\u00eda conducir a que un atacante ejecute comandos arbitrarios con los permisos del proceso Kibana en el sistema host.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\",\"baseScore\":7.5},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-829\"}]},{\"source\":\"bressers@elastic.co\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-73\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.0.0\",\"versionEndExcluding\":\"5.6.13\",\"matchCriteriaId\":\"F7E9222F-72D2-4181-9936-6FC7724B99AF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.0.0\",\"versionEndExcluding\":\"6.4.3\",\"matchCriteriaId\":\"0FD61DF1-4544-4E77-955A-F456D504E6F4\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F87326E-0B56-4356-A889-73D026DB1D4B\"}]}]}],\"references\":[{\"url\":\"http://www.securityfocus.com/bid/106285\",\"source\":\"bressers@elastic.co\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHBA-2018:3743\",\"source\":\"bressers@elastic.co\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594\",\"source\":\"bressers@elastic.co\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.elastic.co/community/security\",\"source\":\"bressers@elastic.co\",\"tags\":[\"Vendor Advisory\"]}]}}" } }
var-201812-0360
Vulnerability from variot
Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system. Kibana Contains a command injection vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. ElasticsearchKibana (formerly known as elasticsearch-dashboard) is an open source, browser-based analytics and search Elasticsearch dashboard tool from Elasticsearch, the Netherlands. Console is one of the console plugins. Kibana is prone to a local file-include vulnerability. This may allow the attacker to compromise the application and the computer; other attacks are also possible. The following versions of product are vulnerable: Kibana 5.0 through 5.5.12 are vulnerable. Kibana 6.0 through 6.4.2 are vulnerable
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201812-0360", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "kibana", "scope": "lt", "trust": 1.4, "vendor": "elasticsearch", "version": "6.4.3" }, { "model": "kibana", "scope": "lt", "trust": 1.4, "vendor": "elasticsearch", "version": "5.6.13" }, { "model": "kibana", "scope": "lt", "trust": 1.0, "vendor": "elastic", "version": "5.6.13" }, { "model": "openshift container platform", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "3.11" }, { "model": "kibana", "scope": "lt", "trust": 1.0, "vendor": "elastic", "version": "6.4.3" }, { "model": "kibana", "scope": "gte", "trust": 1.0, "vendor": "elastic", "version": "5.0.0" }, { "model": "kibana", "scope": "gte", "trust": 1.0, "vendor": "elastic", "version": "6.0.0" }, { "model": "kibana", "scope": "eq", "trust": 0.9, "vendor": "elasticsearch", "version": "5.6.4" }, { "model": "kibana", "scope": "eq", "trust": 0.6, "vendor": "elasticsearch", "version": "6.0.0" }, { "model": "kibana", "scope": "eq", "trust": 0.6, "vendor": "elasticsearch", "version": "6.0.1" }, { "model": "kibana", "scope": "eq", "trust": 0.6, "vendor": "elasticsearch", "version": "6.1.0" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "6.4.2" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "6.4" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "6.3" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "6.2" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "6.1.2" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "6.1.1" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "6.1" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "6.0" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "5.6.12" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "5.6.6" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "5.6.5" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "5.6.3" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "5.6.2" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "5.6.1" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "5.6" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "5.5" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "5.4" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "5.3" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "5.2" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "5.1.2" }, { "model": "kibana", "scope": "eq", "trust": 0.3, "vendor": "elasticsearch", "version": "5.0" }, { "model": "kibana", "scope": "ne", "trust": 0.3, "vendor": "elasticsearch", "version": "6.4.3" }, { "model": "kibana", "scope": "ne", "trust": 0.3, "vendor": "elasticsearch", "version": "5.6.13" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2018-23907" }, { "db": "BID", "id": "106285" }, { "db": "JVNDB", "id": "JVNDB-2018-013160" }, { "db": "NVD", "id": "CVE-2018-17246" }, { "db": "CNNVD", "id": "CNNVD-201811-285" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "5.6.13", "versionStartIncluding": "5.0.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "6.4.3", "versionStartIncluding": "6.0.0", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "NVD", "id": "CVE-2018-17246" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Nethanel Coppenhagen from CyberArk Labs.", "sources": [ { "db": "BID", "id": "106285" } ], "trust": 0.3 }, "cve": "CVE-2018-17246", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "acInsufInfo": false, "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "NVD", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 10.0, "impactScore": 6.4, "integrityImpact": "PARTIAL", "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "trust": 1.0, "userInteractionRequired": false, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "Low", "accessVector": "Network", "authentication": "None", "author": "NVD", "availabilityImpact": "Partial", "baseScore": 7.5, "confidentialityImpact": "Partial", "exploitabilityScore": null, "id": "CVE-2018-17246", "impactScore": null, "integrityImpact": "Partial", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "High", "trust": 0.9, "userInteractionRequired": null, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "author": "CNVD", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 8.0, "id": "CNVD-2018-23907", "impactScore": 6.4, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 0.6, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "NVD", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "exploitabilityScore": 3.9, "impactScore": 5.9, "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "trust": 1.0, "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, { "attackComplexity": "Low", "attackVector": "Network", "author": "NVD", "availabilityImpact": "High", "baseScore": 9.8, "baseSeverity": "Critical", "confidentialityImpact": "High", "exploitabilityScore": null, "id": "CVE-2018-17246", "impactScore": null, "integrityImpact": "High", "privilegesRequired": "None", "scope": "Unchanged", "trust": 0.8, "userInteraction": "None", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } ], "severity": [ { "author": "NVD", "id": "CVE-2018-17246", "trust": 1.8, "value": "CRITICAL" }, { "author": "CNVD", "id": "CNVD-2018-23907", "trust": 0.6, "value": "MEDIUM" }, { "author": "CNNVD", "id": "CNNVD-201811-285", "trust": 0.6, "value": "CRITICAL" }, { "author": "VULMON", "id": "CVE-2018-17246", "trust": 0.1, "value": "HIGH" } ] } ], "sources": [ { "db": "CNVD", "id": "CNVD-2018-23907" }, { "db": "VULMON", "id": "CVE-2018-17246" }, { "db": "JVNDB", "id": "JVNDB-2018-013160" }, { "db": "NVD", "id": "CVE-2018-17246" }, { "db": "CNNVD", "id": "CNNVD-201811-285" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system. Kibana Contains a command injection vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. ElasticsearchKibana (formerly known as elasticsearch-dashboard) is an open source, browser-based analytics and search Elasticsearch dashboard tool from Elasticsearch, the Netherlands. Console is one of the console plugins. Kibana is prone to a local file-include vulnerability. This may allow the attacker to compromise the application and the computer; other attacks are also possible. \nThe following versions of product are vulnerable:\nKibana 5.0 through 5.5.12 are vulnerable. \nKibana 6.0 through 6.4.2 are vulnerable", "sources": [ { "db": "NVD", "id": "CVE-2018-17246" }, { "db": "JVNDB", "id": "JVNDB-2018-013160" }, { "db": "CNVD", "id": "CNVD-2018-23907" }, { "db": "BID", "id": "106285" }, { "db": "VULMON", "id": "CVE-2018-17246" } ], "trust": 2.52 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2018-17246", "trust": 3.4 }, { "db": "BID", "id": "106285", "trust": 1.9 }, { "db": "JVNDB", "id": "JVNDB-2018-013160", "trust": 0.8 }, { "db": "CNVD", "id": "CNVD-2018-23907", "trust": 0.6 }, { "db": "CNNVD", "id": "CNNVD-201811-285", "trust": 0.6 }, { "db": "VULMON", "id": "CVE-2018-17246", "trust": 0.1 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2018-23907" }, { "db": "VULMON", "id": "CVE-2018-17246" }, { "db": "BID", "id": "106285" }, { "db": "JVNDB", "id": "JVNDB-2018-013160" }, { "db": "NVD", "id": "CVE-2018-17246" }, { "db": "CNNVD", "id": "CNNVD-201811-285" } ] }, "id": "VAR-201812-0360", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "CNVD", "id": "CNVD-2018-23907" } ], "trust": 0.06 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "Network device" ], "sub_category": null, "trust": 0.6 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2018-23907" } ] }, "last_update_date": "2023-12-18T13:33:40.019000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "Elastic Stack 6.4.3 and 5.6.13 security update", "trust": 0.8, "url": "https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594" }, { "title": "ESA-2018-18", "trust": 0.8, "url": "https://www.elastic.co/community/security" }, { "title": "ElasticsearchKibanaConsole plugin command to execute the patch for the vulnerability", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchinfo/show/145255" }, { "title": "Elasticsearch Kibana Console Fixes for plugin security vulnerabilities", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=86721" }, { "title": "Red Hat: CVE-2018-17246", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database\u0026qid=cve-2018-17246" }, { "title": "HTB_Ippsec_Notes", "trust": 0.1, "url": "https://github.com/rinkish/htb_ippsec_notes " }, { "title": "loophole", "trust": 0.1, "url": "https://github.com/zhengjim/loophole " } ], "sources": [ { "db": "CNVD", "id": "CNVD-2018-23907" }, { "db": "VULMON", "id": "CVE-2018-17246" }, { "db": "JVNDB", "id": "JVNDB-2018-013160" }, { "db": "CNNVD", "id": "CNNVD-201811-285" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-829", "trust": 1.0 }, { "problemtype": "CWE-77", "trust": 0.8 } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-013160" }, { "db": "NVD", "id": "CVE-2018-17246" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.2, "url": "http://www.securityfocus.com/bid/106285" }, { "trust": 1.9, "url": "https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594" }, { "trust": 1.6, "url": "https://access.redhat.com/errata/rhba-2018:3743" }, { "trust": 1.6, "url": "https://www.elastic.co/community/security" }, { "trust": 1.4, "url": "https://nvd.nist.gov/vuln/detail/cve-2018-17246" }, { "trust": 0.8, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-17246" }, { "trust": 0.3, "url": "https://github.com/elastic/kibana/commit/0d3461c2c995e7ce5bb3e04ba5cecbc05a5386ab#diff-263cb6070b4e54ae3b4c343d14d0813br25" }, { "trust": 0.3, "url": "https://github.com/elastic/kibana" }, { "trust": 0.3, "url": "https://www.elastic.co/products/kibana" }, { "trust": 0.3, "url": "https://www.elastic.co/blog/kibana-local-file-inclusion-flaw-cve-2018-17246" }, { "trust": 0.3, "url": "https://www.elastic.co/downloads/kibana" }, { "trust": 0.3, "url": "https://www.cyberark.com/threat-research-blog/execute-this-i-know-you-have-it/" }, { "trust": 0.3, "url": "https://access.redhat.com/security/cve/cve-2018-17246" }, { "trust": 0.3, "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1647344" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2018-23907" }, { "db": "BID", "id": "106285" }, { "db": "JVNDB", "id": "JVNDB-2018-013160" }, { "db": "NVD", "id": "CVE-2018-17246" }, { "db": "CNNVD", "id": "CNNVD-201811-285" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "CNVD", "id": "CNVD-2018-23907" }, { "db": "VULMON", "id": "CVE-2018-17246" }, { "db": "BID", "id": "106285" }, { "db": "JVNDB", "id": "JVNDB-2018-013160" }, { "db": "NVD", "id": "CVE-2018-17246" }, { "db": "CNNVD", "id": "CNNVD-201811-285" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-11-23T00:00:00", "db": "CNVD", "id": "CNVD-2018-23907" }, { "date": "2018-12-20T00:00:00", "db": "VULMON", "id": "CVE-2018-17246" }, { "date": "2018-12-20T00:00:00", "db": "BID", "id": "106285" }, { "date": "2019-02-15T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-013160" }, { "date": "2018-12-20T22:29:00.367000", "db": "NVD", "id": "CVE-2018-17246" }, { "date": "2018-11-12T00:00:00", "db": "CNNVD", "id": "CNNVD-201811-285" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-11-23T00:00:00", "db": "CNVD", "id": "CNVD-2018-23907" }, { "date": "2020-08-14T00:00:00", "db": "VULMON", "id": "CVE-2018-17246" }, { "date": "2018-12-20T00:00:00", "db": "BID", "id": "106285" }, { "date": "2019-02-15T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-013160" }, { "date": "2020-08-14T17:30:58.793000", "db": "NVD", "id": "CVE-2018-17246" }, { "date": "2019-10-17T00:00:00", "db": "CNNVD", "id": "CNNVD-201811-285" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-201811-285" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Kibana Command injection vulnerability", "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-013160" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "command injection", "sources": [ { "db": "CNNVD", "id": "CNNVD-201811-285" } ], "trust": 0.6 } }
ghsa-cpwf-64qm-2jpm
Vulnerability from github
Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.
{ "affected": [], "aliases": [ "CVE-2018-17246" ], "database_specific": { "cwe_ids": [ "CWE-829" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2018-12-20T22:29:00Z", "severity": "CRITICAL" }, "details": "Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.", "id": "GHSA-cpwf-64qm-2jpm", "modified": "2022-05-13T01:23:28Z", "published": "2022-05-13T01:23:28Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17246" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHBA-2018:3743" }, { "type": "WEB", "url": "https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594" }, { "type": "WEB", "url": "https://www.elastic.co/community/security" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/106285" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "type": "CVSS_V3" } ] }
rhba-2018_3743
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat OpenShift Container Platform releases 3.11.51 is now available with updates to packages and images that fix several bugs and add enhancements.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.11.51. See the following advisory for the container images for this release:\n\nhttps://access.redhat.com/errata/RHBA-2018:3745\n\nThis update fixes the following bugs:\n\n* The SDN daemonset did not run on all nodes. The upgrade process failed, as some nodes did not have an internal network set up. With this bug fix, the SDN daemonset tolerates all taints and runs on all nodes, and the upgrade succeeds. (BZ#1635804)\n\n* OpenShift Ansible\u0027s version check was using alphanumeric order instead of semantic versioning order. Therefore, version 2.5.10 was considered to not meet a requirement for a version newer than 2.5.6. With this bug fix, a semantic versioning check is completed and version 2.5.10 is recognized as newer than version 2.5.6. (BZ#1642361)\n\n* Node ConfigMaps are all created by running `create` tasks on the first master. If the first master has `openshift_use_crio=True`, all ConfigMaps are created with CRI-O settings because the `node-config` template has CRI-O settings as part of the template based on that host variable. The CRI-O settings are now removed from the `node-config` template so that CRI-O settings will only be added if they are part of the `openshift_node_group` edits. Additionally, the `bootstrap-node-config` is updated directly if the host `openshift_use_crio=True`. Node ConfigMaps are now generated correctly based on `openshift_node_group` edits, allowing nodes to be properly configured with CRI-O settings. (BZ#1647516)\n\n* Running `oc logs $fluentd_pod` suggests you run `oc exec \u003cpod_name\u003e /opt/app-root/src/utils/logs`, which includes the non-existing utility logs path. Therefore `oc exec \u003cpod_name\u003e /opt/app-root/src/utils/logs` fails with \"no such file or directory\". The suggested command line is fixed to be `oc exec \u003cpod_name\u003e -- logs` since the utility \"logs\" is now in the PATH and there is no need to specify the full path. Now, `oc logs $fluentd_pod` suggests the correct command line to show the fluentd logs. (BZ#1649997)\n\nThis update includes the following enhancements:\n\n* Liveness and readiness probes are added for the Service Catalog API Server and Controller Manager. If these pods stop responding, OpenShift will restart the pods. Previously, there were no probes to monitor the health of Service Catalog. (BZ#1630324)\n\n* Builds that do not explicitly indicate the docker image they consume (by providing an inline dockerfile or defining the docker strategy\u0027s `From` field) and do not explicitly indicate a pull secret to use, will now use the build\u0027s service account\u0027s docker secret by default. Examples of such builds would be a build that includes a dockerfile in a Git repository. Previously, these builds would use no secret and potentially fail if the base image was not public. Those builds will now succeed without the need to either explicitly specify a pull secret, or explicitly specify the base image in the buildconfig. (BZ#1649062)\n\nAll OpenShift Container Platform 3.11 users are advised to upgrade to these updated packages.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHBA-2018:3743", "url": "https://access.redhat.com/errata/RHBA-2018:3743" }, { "category": "external", "summary": "1614155", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1614155" }, { "category": "external", "summary": "1630324", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1630324" }, { "category": "external", "summary": "1635804", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1635804" }, { "category": "external", "summary": "1639655", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1639655" }, { "category": "external", "summary": "1640078", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1640078" }, { "category": "external", "summary": "1640497", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1640497" }, { "category": "external", "summary": "1640746", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1640746" }, { "category": "external", "summary": "1642361", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1642361" }, { "category": "external", "summary": "1645258", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645258" }, { "category": "external", "summary": "1647516", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1647516" }, { "category": "external", "summary": "1649062", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1649062" }, { "category": "external", "summary": "1649997", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1649997" }, { "category": "external", "summary": "1650129", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1650129" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhba-2018_3743.json" } ], "title": "Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update", "tracking": { "current_release_date": "2024-11-22T12:24:17+00:00", "generator": { "date": "2024-11-22T12:24:17+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHBA-2018:3743", "initial_release_date": "2018-12-12T14:16:43+00:00", "revision_history": [ { "date": "2018-12-12T14:16:43+00:00", "number": "1", "summary": "Initial version" }, { "date": "2018-12-12T14:16:43+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T12:24:17+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 3.11", "product": { "name": "Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:3.11::el7" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "product": { "name": "atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "product_id": "atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-enterprise-service-catalog@3.11.51-1.git.1671.2d16650.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "product": { "name": "atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "product_id": "atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-enterprise-service-catalog-svcat@3.11.51-1.git.1671.2d16650.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "product": { "name": "atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_id": "atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-node@3.11.51-1.git.0.1560686.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "product": { "name": "atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_id": "atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-clients-redistributable@3.11.51-1.git.0.1560686.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "product": { "name": "atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_id": "atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift@3.11.51-1.git.0.1560686.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "product": { "name": "atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_id": "atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-master@3.11.51-1.git.0.1560686.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "product": { "name": "atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_id": "atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-sdn-ovs@3.11.51-1.git.0.1560686.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "product": { "name": "atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_id": "atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-hyperkube@3.11.51-1.git.0.1560686.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "product": { "name": "atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_id": "atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-template-service-broker@3.11.51-1.git.0.1560686.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "product": { "name": "atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_id": "atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-pod@3.11.51-1.git.0.1560686.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "product": { "name": "atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_id": "atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-clients@3.11.51-1.git.0.1560686.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "product": { "name": "atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_id": "atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-hypershift@3.11.51-1.git.0.1560686.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "product": { "name": "atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_id": "atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-tests@3.11.51-1.git.0.1560686.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "product": { "name": "atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "product_id": "atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.51-1.git.0.0aa9fc2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "product": { "name": "atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "product_id": "atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-descheduler@3.11.51-1.git.300.89070e8.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "product": { "name": "atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "product_id": "atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-dockerregistry@3.11.51-1.git.446.d29ce0e.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "product": { "name": "atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "product_id": "atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.51-1.git.52.03e3a91.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "product": { "name": "atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "product_id": "atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.51-1.git.254.22189b0.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "product": { "name": "atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "product_id": "atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-service-idler@3.11.51-1.git.14.813574a.el7?arch=x86_64" } } }, { "category": "product_version", "name": "atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "product": { "name": "atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "product_id": "atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-web-console@3.11.51-1.git.324.0ae64ed.el7?arch=x86_64" } } }, { "category": "product_version", "name": "cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "product": { "name": "cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "product_id": "cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o@1.11.10-1.rhaos3.11.git42c86f0.el7?arch=x86_64" } } }, { "category": "product_version", "name": "cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "product": { "name": "cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "product_id": "cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debuginfo@1.11.10-1.rhaos3.11.git42c86f0.el7?arch=x86_64" } } }, { "category": "product_version", "name": "golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "product": { "name": "golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "product_id": "golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.51-1.git.419.1af74df.el7?arch=x86_64" } } }, { "category": "product_version", "name": "prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "product": { "name": "prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "product_id": "prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/prometheus-alertmanager@3.11.51-1.git.0.50a0687.el7?arch=x86_64" } } }, { "category": "product_version", "name": "prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64", "product": { "name": "prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64", "product_id": "prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/prometheus-node-exporter@3.11.51-1.git.1063.12dd8be.el7?arch=x86_64" } } }, { "category": "product_version", "name": "prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "product": { "name": "prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "product_id": "prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/prometheus@3.11.51-1.git.5023.0ad933c.el7?arch=x86_64" } } }, { "category": "product_version", "name": "kibana-debuginfo-0:5.6.13-1.el7.x86_64", "product": { "name": "kibana-debuginfo-0:5.6.13-1.el7.x86_64", "product_id": "kibana-debuginfo-0:5.6.13-1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kibana-debuginfo@5.6.13-1.el7?arch=x86_64" } } }, { "category": "product_version", "name": "kibana-0:5.6.13-1.el7.x86_64", "product": { "name": "kibana-0:5.6.13-1.el7.x86_64", "product_id": "kibana-0:5.6.13-1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kibana@5.6.13-1.el7?arch=x86_64" } } }, { "category": "product_version", "name": "openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "product": { "name": "openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "product_id": "openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.51-1.git.219.8ea4275.el7?arch=x86_64" } } }, { "category": "product_version", "name": "openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "product": { "name": "openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "product_id": "openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.51-1.git.380.ffa21af.el7?arch=x86_64" } } }, { "category": "product_version", "name": "openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "product": { "name": "openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "product_id": "openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-monitor-project-lifecycle@3.11.51-1.git.59.7b59e29.el7?arch=x86_64" } } }, { "category": "product_version", "name": "openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "product": { "name": "openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "product_id": "openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-monitor-sample-app@3.11.51-1.git.5.f6d0188.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "product": { "name": "atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "product_id": "atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-enterprise-service-catalog@3.11.51-1.git.1671.2d16650.el7?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "product": { "name": "atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "product_id": "atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift@3.11.51-1.git.0.1560686.el7?arch=src" } } }, { "category": "product_version", "name": "atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "product": { "name": "atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "product_id": "atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.51-1.git.0.0aa9fc2.el7?arch=src" } } }, { "category": "product_version", "name": "atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "product": { "name": "atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "product_id": "atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-descheduler@3.11.51-1.git.300.89070e8.el7?arch=src" } } }, { "category": "product_version", "name": "atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "product": { "name": "atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "product_id": "atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-dockerregistry@3.11.51-1.git.446.d29ce0e.el7?arch=src" } } }, { "category": "product_version", "name": "atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "product": { "name": "atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "product_id": "atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.51-1.git.52.03e3a91.el7?arch=src" } } }, { "category": "product_version", "name": "atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "product": { "name": "atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "product_id": "atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.51-1.git.254.22189b0.el7?arch=src" } } }, { "category": "product_version", "name": "atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "product": { "name": "atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "product_id": "atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-service-idler@3.11.51-1.git.14.813574a.el7?arch=src" } } }, { "category": "product_version", "name": "atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "product": { "name": "atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "product_id": "atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-web-console@3.11.51-1.git.324.0ae64ed.el7?arch=src" } } }, { "category": "product_version", "name": "cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "product": { "name": "cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "product_id": "cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o@1.11.10-1.rhaos3.11.git42c86f0.el7?arch=src" } } }, { "category": "product_version", "name": "golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "product": { "name": "golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "product_id": "golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.51-1.git.419.1af74df.el7?arch=src" } } }, { "category": "product_version", "name": "golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "product": { "name": "golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "product_id": "golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/golang-github-prometheus-alertmanager@3.11.51-1.git.0.50a0687.el7?arch=src" } } }, { "category": "product_version", "name": "golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "product": { "name": "golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "product_id": "golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/golang-github-prometheus-node_exporter@3.11.51-1.git.1063.12dd8be.el7?arch=src" } } }, { "category": "product_version", "name": "golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "product": { "name": "golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "product_id": "golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/golang-github-prometheus-prometheus@3.11.51-1.git.5023.0ad933c.el7?arch=src" } } }, { "category": "product_version", "name": "jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "product": { "name": "jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "product_id": "jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jenkins-2-plugins@3.11.1542061886-1.el7?arch=src" } } }, { "category": "product_version", "name": "jenkins-0:2.138.2.1542054911-1.el7.src", "product": { "name": "jenkins-0:2.138.2.1542054911-1.el7.src", "product_id": "jenkins-0:2.138.2.1542054911-1.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jenkins@2.138.2.1542054911-1.el7?arch=src" } } }, { "category": "product_version", "name": "kibana-0:5.6.13-1.el7.src", "product": { "name": "kibana-0:5.6.13-1.el7.src", "product_id": "kibana-0:5.6.13-1.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/kibana@5.6.13-1.el7?arch=src" } } }, { "category": "product_version", "name": "openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "product": { "name": "openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "product_id": "openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.51-1.git.219.8ea4275.el7?arch=src" } } }, { "category": "product_version", "name": "openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "product": { "name": "openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "product_id": "openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.51-1.git.380.ffa21af.el7?arch=src" } } }, { "category": "product_version", "name": "openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "product": { "name": "openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "product_id": "openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-monitor-project-lifecycle@3.11.51-1.git.59.7b59e29.el7?arch=src" } } }, { "category": "product_version", "name": "openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "product": { "name": "openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "product_id": "openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-monitor-sample-app@3.11.51-1.git.5.f6d0188.el7?arch=src" } } }, { "category": "product_version", "name": "openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "product": { "name": "openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "product_id": "openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-ansible@3.11.51-2.git.0.51c90a3.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "product": { "name": "atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "product_id": "atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-enterprise-service-catalog@3.11.51-1.git.1671.2d16650.el7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "product": { "name": "atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "product_id": "atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-enterprise-service-catalog-svcat@3.11.51-1.git.1671.2d16650.el7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product": { "name": "atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_id": "atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-node@3.11.51-1.git.0.1560686.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product": { "name": "atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_id": "atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift@3.11.51-1.git.0.1560686.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product": { "name": "atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_id": "atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-master@3.11.51-1.git.0.1560686.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product": { "name": "atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_id": "atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-sdn-ovs@3.11.51-1.git.0.1560686.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product": { "name": "atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_id": "atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-hyperkube@3.11.51-1.git.0.1560686.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product": { "name": "atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_id": "atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-template-service-broker@3.11.51-1.git.0.1560686.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product": { "name": "atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_id": "atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-pod@3.11.51-1.git.0.1560686.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product": { "name": "atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_id": "atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-clients@3.11.51-1.git.0.1560686.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product": { "name": "atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_id": "atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-hypershift@3.11.51-1.git.0.1560686.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product": { "name": "atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_id": "atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-tests@3.11.51-1.git.0.1560686.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "product": { "name": "atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "product_id": "atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.51-1.git.0.0aa9fc2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "product": { "name": "atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "product_id": "atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-descheduler@3.11.51-1.git.300.89070e8.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "product": { "name": "atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "product_id": "atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-dockerregistry@3.11.51-1.git.446.d29ce0e.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "product": { "name": "atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "product_id": "atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.51-1.git.52.03e3a91.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "product": { "name": "atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "product_id": "atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.51-1.git.254.22189b0.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "product": { "name": "atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "product_id": "atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-service-idler@3.11.51-1.git.14.813574a.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "product": { "name": "atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "product_id": "atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-web-console@3.11.51-1.git.324.0ae64ed.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "product": { "name": "cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "product_id": "cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o@1.11.10-1.rhaos3.11.git42c86f0.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "product": { "name": "cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "product_id": "cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debuginfo@1.11.10-1.rhaos3.11.git42c86f0.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "product": { "name": "golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "product_id": "golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.51-1.git.419.1af74df.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "product": { "name": "prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "product_id": "prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/prometheus-alertmanager@3.11.51-1.git.0.50a0687.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "product": { "name": "prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "product_id": "prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/prometheus-node-exporter@3.11.51-1.git.1063.12dd8be.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "product": { "name": "prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "product_id": "prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/prometheus@3.11.51-1.git.5023.0ad933c.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "product": { "name": "kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "product_id": "kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/kibana-debuginfo@5.6.13-1.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "kibana-0:5.6.13-1.el7.ppc64le", "product": { "name": "kibana-0:5.6.13-1.el7.ppc64le", "product_id": "kibana-0:5.6.13-1.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/kibana@5.6.13-1.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "product": { "name": "openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "product_id": "openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.51-1.git.219.8ea4275.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "product": { "name": "openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "product_id": "openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.51-1.git.380.ffa21af.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "product": { "name": "openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "product_id": "openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-monitor-project-lifecycle@3.11.51-1.git.59.7b59e29.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "product": { "name": "openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "product_id": "openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-monitor-sample-app@3.11.51-1.git.5.f6d0188.el7?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "product": { "name": "atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "product_id": "atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-docker-excluder@3.11.51-1.git.0.1560686.el7?arch=noarch" } } }, { "category": "product_version", "name": "atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "product": { "name": "atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "product_id": "atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-excluder@3.11.51-1.git.0.1560686.el7?arch=noarch" } } }, { "category": "product_version", "name": "jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "product": { "name": "jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "product_id": "jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jenkins-2-plugins@3.11.1542061886-1.el7?arch=noarch" } } }, { "category": "product_version", "name": "jenkins-0:2.138.2.1542054911-1.el7.noarch", "product": { "name": "jenkins-0:2.138.2.1542054911-1.el7.noarch", "product_id": "jenkins-0:2.138.2.1542054911-1.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jenkins@2.138.2.1542054911-1.el7?arch=noarch" } } }, { "category": "product_version", "name": "openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "product": { "name": "openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "product_id": "openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-ansible-test@3.11.51-2.git.0.51c90a3.el7?arch=noarch" } } }, { "category": "product_version", "name": "openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "product": { "name": "openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "product_id": "openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-ansible-roles@3.11.51-2.git.0.51c90a3.el7?arch=noarch" } } }, { "category": "product_version", "name": "openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "product": { "name": "openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "product_id": "openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-ansible@3.11.51-2.git.0.51c90a3.el7?arch=noarch" } } }, { "category": "product_version", "name": "openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "product": { "name": "openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "product_id": "openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-ansible-playbooks@3.11.51-2.git.0.51c90a3.el7?arch=noarch" } } }, { "category": "product_version", "name": "openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "product": { "name": "openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "product_id": "openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-ansible-docs@3.11.51-2.git.0.51c90a3.el7?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le" }, "product_reference": "atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src" }, "product_reference": "atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64" }, "product_reference": "atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le" }, "product_reference": "atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64" }, "product_reference": "atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le" }, "product_reference": "atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src" }, "product_reference": "atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64" }, "product_reference": "atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le" }, "product_reference": "atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64" }, "product_reference": "atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64" }, "product_reference": "atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le" }, "product_reference": "atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src" }, "product_reference": "atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64" }, "product_reference": "atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le" }, "product_reference": "atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src" }, "product_reference": "atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64" }, "product_reference": "atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch" }, "product_reference": "atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le" }, "product_reference": "atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src" }, "product_reference": "atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64" }, "product_reference": "atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch" }, "product_reference": "atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le" }, "product_reference": "atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64" }, "product_reference": "atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le" }, "product_reference": "atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64" }, "product_reference": "atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le" }, "product_reference": "atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64" }, "product_reference": "atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le" }, "product_reference": "atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src" }, "product_reference": "atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64" }, "product_reference": "atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le" }, "product_reference": "atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64" }, "product_reference": "atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le" }, "product_reference": "atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src" }, "product_reference": "atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64" }, "product_reference": "atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le" }, "product_reference": "atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64" }, "product_reference": "atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le" }, "product_reference": "atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64" }, "product_reference": "atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le" }, "product_reference": "atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src" }, "product_reference": "atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64" }, "product_reference": "atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le" }, "product_reference": "atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64" }, "product_reference": "atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le" }, "product_reference": "atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64" }, "product_reference": "atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le" }, "product_reference": "atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src" }, "product_reference": "atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64" }, "product_reference": "atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le" }, "product_reference": "cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src" }, "product_reference": "cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64" }, "product_reference": "cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le" }, "product_reference": "cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64" }, "product_reference": "cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le" }, "product_reference": "golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src" }, "product_reference": "golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64" }, "product_reference": "golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src" }, "product_reference": "golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src" }, "product_reference": "golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src" }, "product_reference": "golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "jenkins-0:2.138.2.1542054911-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch" }, "product_reference": "jenkins-0:2.138.2.1542054911-1.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "jenkins-0:2.138.2.1542054911-1.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src" }, "product_reference": "jenkins-0:2.138.2.1542054911-1.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch" }, "product_reference": "jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "jenkins-2-plugins-0:3.11.1542061886-1.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src" }, "product_reference": "jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "kibana-0:5.6.13-1.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le" }, "product_reference": "kibana-0:5.6.13-1.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "kibana-0:5.6.13-1.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src" }, "product_reference": "kibana-0:5.6.13-1.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "kibana-0:5.6.13-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64" }, "product_reference": "kibana-0:5.6.13-1.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "kibana-debuginfo-0:5.6.13-1.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le" }, "product_reference": "kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "kibana-debuginfo-0:5.6.13-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64" }, "product_reference": "kibana-debuginfo-0:5.6.13-1.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch" }, "product_reference": "openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src" }, "product_reference": "openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch" }, "product_reference": "openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch" }, "product_reference": "openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch" }, "product_reference": "openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch" }, "product_reference": "openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le" }, "product_reference": "openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src" }, "product_reference": "openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64" }, "product_reference": "openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le" }, "product_reference": "openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src" }, "product_reference": "openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64" }, "product_reference": "openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le" }, "product_reference": "openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src" }, "product_reference": "openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64" }, "product_reference": "openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le" }, "product_reference": "openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src" }, "product_reference": "openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64" }, "product_reference": "openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le" }, "product_reference": "prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64" }, "product_reference": "prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le" }, "product_reference": "prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64" }, "product_reference": "prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le" }, "product_reference": "prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" }, { "category": "default_component_of", "full_product_name": { "name": "prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11", "product_id": "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" }, "product_reference": "prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-3.11" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-17246", "cwe": { "id": "CWE-470", "name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)" }, "discovery_date": "2018-11-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1647344" } ], "notes": [ { "category": "description", "text": "Kibana, before 6.4.3 and 5.6.13, contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute JavaScript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.", "title": "Vulnerability description" }, { "category": "summary", "text": "kibana: Arbitrary file inclusion vulnerability in the Console plugin", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-17246" }, { "category": "external", "summary": "RHBZ#1647344", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1647344" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17246", "url": "https://www.cve.org/CVERecord?id=CVE-2018-17246" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17246", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17246" }, { "category": "external", "summary": "https://www.elastic.co/community/security", "url": "https://www.elastic.co/community/security" } ], "release_date": "2018-11-06T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-12-12T14:16:43+00:00", "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.\n\nSee the following documentation, which will be updated shortly for release 3.11.51, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html\n\nThis update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.", "product_ids": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2018:3743" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.0" }, "products": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "kibana: Arbitrary file inclusion vulnerability in the Console plugin" }, { "cve": "CVE-2018-1000406", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "discovery_date": "2018-10-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1642877" } ], "notes": [ { "category": "description", "text": "A path traversal vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java that allows attackers with Job/Configure permission to define a file parameter with a file name outside the intended directory, resulting in an arbitrary file write on the Jenkins master when scheduling a build.", "title": "Vulnerability description" }, { "category": "summary", "text": "jenkins: Arbitrary file write vulnerability using file parameter definitions", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-1000406" }, { "category": "external", "summary": "RHBZ#1642877", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1642877" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-1000406", "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000406" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000406", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000406" }, { "category": "external", "summary": "https://jenkins.io/security/advisory/2018-10-10/#SECURITY-1074", "url": "https://jenkins.io/security/advisory/2018-10-10/#SECURITY-1074" } ], "release_date": "2018-10-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-12-12T14:16:43+00:00", "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.\n\nSee the following documentation, which will be updated shortly for release 3.11.51, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html\n\nThis update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.", "product_ids": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2018:3743" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jenkins: Arbitrary file write vulnerability using file parameter definitions" }, { "cve": "CVE-2018-1000407", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2018-10-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1642879" } ], "notes": [ { "category": "description", "text": "A cross-site scripting vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/model/Api.java that allows attackers to specify URLs to Jenkins that result in rendering arbitrary attacker-controlled HTML by Jenkins.", "title": "Vulnerability description" }, { "category": "summary", "text": "jenkins: Reflected XSS vulnerability", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-1000407" }, { "category": "external", "summary": "RHBZ#1642879", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1642879" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-1000407", "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000407" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000407", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000407" }, { "category": "external", "summary": "https://jenkins.io/security/advisory/2018-10-10/#SECURITY-1129", "url": "https://jenkins.io/security/advisory/2018-10-10/#SECURITY-1129" } ], "release_date": "2018-10-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-12-12T14:16:43+00:00", "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.\n\nSee the following documentation, which will be updated shortly for release 3.11.51, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html\n\nThis update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.", "product_ids": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2018:3743" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jenkins: Reflected XSS vulnerability" }, { "cve": "CVE-2018-1000408", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2018-10-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1642884" } ], "notes": [ { "category": "description", "text": "A denial of service vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java that allows attackers without Overall/Read permission to access a specific URL on instances using the built-in Jenkins user database security realm that results in the creation of an ephemeral user record in memory.", "title": "Vulnerability description" }, { "category": "summary", "text": "jenkins: Ephemeral user record creation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-1000408" }, { "category": "external", "summary": "RHBZ#1642884", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1642884" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-1000408", "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000408" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000408", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000408" }, { "category": "external", "summary": "https://jenkins.io/security/advisory/2018-10-10/#SECURITY-1128", "url": "https://jenkins.io/security/advisory/2018-10-10/#SECURITY-1128" } ], "release_date": "2018-10-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-12-12T14:16:43+00:00", "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.\n\nSee the following documentation, which will be updated shortly for release 3.11.51, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html\n\nThis update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.", "product_ids": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2018:3743" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "version": "3.0" }, "products": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jenkins: Ephemeral user record creation" }, { "cve": "CVE-2018-1000409", "cwe": { "id": "CWE-384", "name": "Session Fixation" }, "discovery_date": "2018-10-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1642885" } ], "notes": [ { "category": "description", "text": "A session fixation vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java that prevented Jenkins from invalidating the existing session and creating a new one when a user signed up for a new user account.", "title": "Vulnerability description" }, { "category": "summary", "text": "jenkins: Session fixation vulnerability on user signup", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-1000409" }, { "category": "external", "summary": "RHBZ#1642885", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1642885" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-1000409", "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000409" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000409", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000409" }, { "category": "external", "summary": "https://jenkins.io/security/advisory/2018-10-10/#SECURITY-1158", "url": "https://jenkins.io/security/advisory/2018-10-10/#SECURITY-1158" } ], "release_date": "2018-10-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-12-12T14:16:43+00:00", "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.\n\nSee the following documentation, which will be updated shortly for release 3.11.51, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html\n\nThis update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.", "product_ids": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2018:3743" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jenkins: Session fixation vulnerability on user signup" }, { "cve": "CVE-2018-1000410", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2018-10-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1642892" } ], "notes": [ { "category": "description", "text": "An information exposure vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier, and the Stapler framework used by these releases, in core/src/main/java/org/kohsuke/stapler/RequestImpl.java, core/src/main/java/hudson/model/Descriptor.java that allows attackers with Overall/Administer permission or access to the local file system to obtain credentials entered by users if the form submission could not be successfully processed.", "title": "Vulnerability description" }, { "category": "summary", "text": "jenkins: Failures to process form submission data could result in secrets being displayed or written to logs", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-1000410" }, { "category": "external", "summary": "RHBZ#1642892", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1642892" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-1000410", "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000410" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000410", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000410" }, { "category": "external", "summary": "https://jenkins.io/security/advisory/2018-10-10/#SECURITY-765", "url": "https://jenkins.io/security/advisory/2018-10-10/#SECURITY-765" } ], "release_date": "2018-10-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-12-12T14:16:43+00:00", "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.\n\nSee the following documentation, which will be updated shortly for release 3.11.51, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html\n\nThis update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.", "product_ids": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2018:3743" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.9, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "jenkins: Failures to process form submission data could result in secrets being displayed or written to logs" }, { "cve": "CVE-2018-1000997", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2018-10-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1642876" } ], "notes": [ { "category": "description", "text": "A path traversal vulnerability exists in the Stapler web framework used by Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/org/kohsuke/stapler/Facet.java, groovy/src/main/java/org/kohsuke/stapler/jelly/groovy/GroovyFacet.java, jelly/src/main/java/org/kohsuke/stapler/jelly/JellyFacet.java, jruby/src/main/java/org/kohsuke/stapler/jelly/jruby/JRubyFacet.java, jsp/src/main/java/org/kohsuke/stapler/jsp/JSPFacet.java that allows attackers to render routable objects using any view in Jenkins, exposing internal information about those objects not intended to be viewed, such as their toString() representation.", "title": "Vulnerability description" }, { "category": "summary", "text": "jenkins: Path traversal vulnerability in Stapler allowed accessing internal data", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-1000997" }, { "category": "external", "summary": "RHBZ#1642876", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1642876" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-1000997", "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000997" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000997", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000997" }, { "category": "external", "summary": "https://jenkins.io/security/advisory/2018-10-10/", "url": "https://jenkins.io/security/advisory/2018-10-10/" } ], "release_date": "2018-10-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-12-12T14:16:43+00:00", "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.\n\nSee the following documentation, which will be updated shortly for release 3.11.51, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html\n\nThis update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.", "product_ids": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2018:3743" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jenkins: Path traversal vulnerability in Stapler allowed accessing internal data" }, { "cve": "CVE-2018-1999043", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "discovery_date": "2018-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1620342" } ], "notes": [ { "category": "description", "text": "A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in BasicAuthenticationFilter.java, BasicHeaderApiTokenAuthenticator.java that allows attackers to create ephemeral in-memory user records by attempting to log in using invalid credentials.", "title": "Vulnerability description" }, { "category": "summary", "text": "jenkins: Ephemeral user record was created on some invalid authentication attempts", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-1999043" }, { "category": "external", "summary": "RHBZ#1620342", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1620342" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-1999043", "url": "https://www.cve.org/CVERecord?id=CVE-2018-1999043" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1999043", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1999043" }, { "category": "external", "summary": "https://jenkins.io/security/advisory/2018-08-15/#SECURITY-672", "url": "https://jenkins.io/security/advisory/2018-08-15/#SECURITY-672" } ], "release_date": "2018-08-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-12-12T14:16:43+00:00", "details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.\n\nSee the following documentation, which will be updated shortly for release 3.11.51, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html\n\nThis update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.", "product_ids": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2018:3743" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "version": "3.0" }, "products": [ "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.src", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.51-1.git.1671.2d16650.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.51-1.git.0.0aa9fc2.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.51-1.git.300.89070e8.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.51-1.git.446.d29ce0e.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.51-1.git.0.1560686.el7.noarch", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.51-1.git.52.03e3a91.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.51-1.git.254.22189b0.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.51-1.git.14.813574a.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.51-1.git.0.1560686.el7.x86_64", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.ppc64le", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.src", "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.51-1.git.324.0ae64ed.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.src", "7Server-RH7-RHOSE-3.11:cri-o-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.ppc64le", "7Server-RH7-RHOSE-3.11:cri-o-debuginfo-0:1.11.10-1.rhaos3.11.git42c86f0.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.ppc64le", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.51-1.git.419.1af74df.el7.x86_64", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.51-1.git.1063.12dd8be.el7.src", "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.51-1.git.5023.0ad933c.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-0:2.138.2.1542054911-1.el7.src", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.noarch", "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1542061886-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.src", "7Server-RH7-RHOSE-3.11:kibana-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.ppc64le", "7Server-RH7-RHOSE-3.11:kibana-debuginfo-0:5.6.13-1.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.51-2.git.0.51c90a3.el7.src", "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.51-2.git.0.51c90a3.el7.noarch", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.51-1.git.219.8ea4275.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.src", "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.51-1.git.380.ffa21af.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-project-lifecycle-0:3.11.51-1.git.59.7b59e29.el7.x86_64", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.ppc64le", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.src", "7Server-RH7-RHOSE-3.11:openshift-monitor-sample-app-0:3.11.51-1.git.5.f6d0188.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.51-1.git.5023.0ad933c.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.51-1.git.0.50a0687.el7.x86_64", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.ppc64le", "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.51-1.git.1063.12dd8be.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jenkins: Ephemeral user record was created on some invalid authentication attempts" } ] }
gsd-2018-17246
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2018-17246", "description": "Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.", "id": "GSD-2018-17246", "references": [ "https://www.suse.com/security/cve/CVE-2018-17246.html", "https://access.redhat.com/errata/RHBA-2018:3743" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2018-17246" ], "details": "Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.", "id": "GSD-2018-17246", "modified": "2023-12-13T01:22:31.349766Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "security@elastic.co", "ID": "CVE-2018-17246", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Kibana", "version": { "version_data": [ { "version_value": "before 6.4.3 and 5.6.13" } ] } } ] }, "vendor_name": "Elastic" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-73: External Control of File Name or Path" } ] } ] }, "references": { "reference_data": [ { "name": "106285", "refsource": "BID", "url": "http://www.securityfocus.com/bid/106285" }, { "name": "https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594", "refsource": "MISC", "url": "https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594" }, { "name": "RHBA-2018:3743", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHBA-2018:3743" }, { "name": "https://www.elastic.co/community/security", "refsource": "CONFIRM", "url": "https://www.elastic.co/community/security" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "5.6.13", "versionStartIncluding": "5.0.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "6.4.3", "versionStartIncluding": "6.0.0", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "security@elastic.co", "ID": "CVE-2018-17246" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-829" } ] } ] }, "references": { "reference_data": [ { "name": "https://www.elastic.co/community/security", "refsource": "CONFIRM", "tags": [ "Vendor Advisory" ], "url": "https://www.elastic.co/community/security" }, { "name": "https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594", "refsource": "MISC", "tags": [ "Vendor Advisory" ], "url": "https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594" }, { "name": "106285", "refsource": "BID", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securityfocus.com/bid/106285" }, { "name": "RHBA-2018:3743", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHBA-2018:3743" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": false, "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "exploitabilityScore": 3.9, "impactScore": 5.9 } }, "lastModifiedDate": "2020-08-14T17:30Z", "publishedDate": "2018-12-20T22:29Z" } } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.