Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2021-44549
Vulnerability from cvelistv5
▼ | URL | Tags | |
---|---|---|---|
security@apache.org | https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f | Mailing List, Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f | Mailing List, Vendor Advisory |
Vendor | Product | Version | ||
---|---|---|---|---|
Apache Software Foundation | Apache Sling Commons Messaging Mail |
Version: Apache Sling Commons Messaging Mail 1.0.0 1.0.0 |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-04T04:25:16.815Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "Apache Sling Commons Messaging Mail", vendor: "Apache Software Foundation", versions: [ { status: "affected", version: "Apache Sling Commons Messaging Mail 1.0.0 1.0.0", }, ], }, ], credits: [ { lang: "en", value: "The issue was reported by Michael Lescisin.", }, ], descriptions: [ { lang: "en", value: "Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via SMTPS. To reduce the risk of \"man in the middle\" attacks additional server identity checks must be performed when accessing mail servers. For compatibility reasons these additional checks are disabled by default in JavaMail/Jakarta Mail. The SimpleMailService in Apache Sling Commons Messaging Mail 1.0 lacks an option to enable these checks for the shared mail session. A user could enable these checks nevertheless by accessing the session via the message created by SimpleMessageBuilder and setting the property mail.smtps.ssl.checkserveridentity to true. Apache Sling Commons Messaging Mail 2.0 adds support for enabling server identity checks and these checks are enabled by default. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429", }, ], metrics: [ { other: { content: { other: "low", }, type: "unknown", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-295", description: "CWE-295: Improper Certificate Validation, CWE-297: Improper Validation of Certificate with Host Mismatch", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2021-12-14T15:15:10", orgId: "f0158376-9dc2-43b6-827c-5f631a4d8d09", shortName: "apache", }, references: [ { tags: [ "x_refsource_MISC", ], url: "https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f", }, ], source: { discovery: "UNKNOWN", }, title: "SMTPS server hostname not checked when making TLS connection to SMTPS server", workarounds: [ { lang: "en", value: "Set the property mail.smtps.ssl.checkserveridentity to true via message's session.", }, ], x_generator: { engine: "Vulnogram 0.0.9", }, x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "security@apache.org", ID: "CVE-2021-44549", STATE: "PUBLIC", TITLE: "SMTPS server hostname not checked when making TLS connection to SMTPS server", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "Apache Sling Commons Messaging Mail", version: { version_data: [ { version_affected: "=", version_name: "Apache Sling Commons Messaging Mail 1.0.0", version_value: "1.0.0", }, ], }, }, ], }, vendor_name: "Apache Software Foundation", }, ], }, }, credit: [ { lang: "eng", value: "The issue was reported by Michael Lescisin.", }, ], data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via SMTPS. To reduce the risk of \"man in the middle\" attacks additional server identity checks must be performed when accessing mail servers. For compatibility reasons these additional checks are disabled by default in JavaMail/Jakarta Mail. The SimpleMailService in Apache Sling Commons Messaging Mail 1.0 lacks an option to enable these checks for the shared mail session. A user could enable these checks nevertheless by accessing the session via the message created by SimpleMessageBuilder and setting the property mail.smtps.ssl.checkserveridentity to true. Apache Sling Commons Messaging Mail 2.0 adds support for enabling server identity checks and these checks are enabled by default. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429", }, ], }, generator: { engine: "Vulnogram 0.0.9", }, impact: [ { other: "low", }, ], problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "CWE-295: Improper Certificate Validation, CWE-297: Improper Validation of Certificate with Host Mismatch", }, ], }, ], }, references: { reference_data: [ { name: "https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f", refsource: "MISC", url: "https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f", }, ], }, source: { discovery: "UNKNOWN", }, work_around: [ { lang: "en", value: "Set the property mail.smtps.ssl.checkserveridentity to true via message's session.", }, ], }, }, }, cveMetadata: { assignerOrgId: "f0158376-9dc2-43b6-827c-5f631a4d8d09", assignerShortName: "apache", cveId: "CVE-2021-44549", datePublished: "2021-12-14T15:15:10", dateReserved: "2021-12-04T00:00:00", dateUpdated: "2024-08-04T04:25:16.815Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { fkie_nvd: { configurations: "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:sling_commons_messaging_mail:1.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"32B6D607-277A-4C47-82F7-D205229B331A\"}]}]}]", descriptions: "[{\"lang\": \"en\", \"value\": \"Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via SMTPS. To reduce the risk of \\\"man in the middle\\\" attacks additional server identity checks must be performed when accessing mail servers. For compatibility reasons these additional checks are disabled by default in JavaMail/Jakarta Mail. The SimpleMailService in Apache Sling Commons Messaging Mail 1.0 lacks an option to enable these checks for the shared mail session. A user could enable these checks nevertheless by accessing the session via the message created by SimpleMessageBuilder and setting the property mail.smtps.ssl.checkserveridentity to true. Apache Sling Commons Messaging Mail 2.0 adds support for enabling server identity checks and these checks are enabled by default. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429\"}, {\"lang\": \"es\", \"value\": \"Apache Sling Commons Messaging Mail proporciona una capa sencilla sobre JavaMail/Jakarta Mail para OSGi para enviar correos por medio de SMTPS. Para reducir el riesgo de ataques de tipo \\\"man in the middle\\\" deben realizarse comprobaciones adicionales de la identidad del servidor cuando accede a los servidores de correo. Por razones de compatibilidad, estas comprobaciones adicionales est\\u00e1n deshabilitadas por defecto en JavaMail/Jakarta Mail. El SimpleMailService de Apache Sling Commons Messaging Mail versi\\u00f3n 1.0 carece de una opci\\u00f3n para habilitar estas comprobaciones para la sesi\\u00f3n de correo compartido. Sin embargo, un usuario podr\\u00eda habilitar estas comprobaciones accediendo a la sesi\\u00f3n por medio del mensaje creado por SimpleMessageBuilder y estableciendo la propiedad mail.smtps.ssl.checkserveridentity a true. Apache Sling Commons Messaging Mail versi\\u00f3n 2.0 a\\u00f1ade soporte para habilitar las comprobaciones de identidad del servidor y estas comprobaciones est\\u00e1n habilitadas por defecto. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429\"}]", id: "CVE-2021-44549", lastModified: "2024-11-21T06:31:12.580", metrics: "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N\", \"baseScore\": 7.4, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.2, \"impactScore\": 5.2}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:P/I:P/A:N\", \"baseScore\": 5.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 4.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}", published: "2021-12-14T16:15:09.763", references: "[{\"url\": \"https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f\", \"source\": \"security@apache.org\", \"tags\": [\"Mailing List\", \"Vendor Advisory\"]}, {\"url\": \"https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Vendor Advisory\"]}]", sourceIdentifier: "security@apache.org", vulnStatus: "Modified", weaknesses: "[{\"source\": \"security@apache.org\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-295\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-295\"}]}]", }, nvd: "{\"cve\":{\"id\":\"CVE-2021-44549\",\"sourceIdentifier\":\"security@apache.org\",\"published\":\"2021-12-14T16:15:09.763\",\"lastModified\":\"2024-11-21T06:31:12.580\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via SMTPS. To reduce the risk of \\\"man in the middle\\\" attacks additional server identity checks must be performed when accessing mail servers. For compatibility reasons these additional checks are disabled by default in JavaMail/Jakarta Mail. The SimpleMailService in Apache Sling Commons Messaging Mail 1.0 lacks an option to enable these checks for the shared mail session. A user could enable these checks nevertheless by accessing the session via the message created by SimpleMessageBuilder and setting the property mail.smtps.ssl.checkserveridentity to true. Apache Sling Commons Messaging Mail 2.0 adds support for enabling server identity checks and these checks are enabled by default. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429\"},{\"lang\":\"es\",\"value\":\"Apache Sling Commons Messaging Mail proporciona una capa sencilla sobre JavaMail/Jakarta Mail para OSGi para enviar correos por medio de SMTPS. Para reducir el riesgo de ataques de tipo \\\"man in the middle\\\" deben realizarse comprobaciones adicionales de la identidad del servidor cuando accede a los servidores de correo. Por razones de compatibilidad, estas comprobaciones adicionales están deshabilitadas por defecto en JavaMail/Jakarta Mail. El SimpleMailService de Apache Sling Commons Messaging Mail versión 1.0 carece de una opción para habilitar estas comprobaciones para la sesión de correo compartido. Sin embargo, un usuario podría habilitar estas comprobaciones accediendo a la sesión por medio del mensaje creado por SimpleMessageBuilder y estableciendo la propiedad mail.smtps.ssl.checkserveridentity a true. Apache Sling Commons Messaging Mail versión 2.0 añade soporte para habilitar las comprobaciones de identidad del servidor y estas comprobaciones están habilitadas por defecto. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N\",\"baseScore\":7.4,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":5.2}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:N\",\"baseScore\":5.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"security@apache.org\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-295\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-295\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:sling_commons_messaging_mail:1.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"32B6D607-277A-4C47-82F7-D205229B331A\"}]}]}],\"references\":[{\"url\":\"https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Vendor Advisory\"]},{\"url\":\"https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Vendor Advisory\"]}]}}", }, }
gsd-2021-44549
Vulnerability from gsd
{ GSD: { alias: "CVE-2021-44549", description: "Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via SMTPS. To reduce the risk of \"man in the middle\" attacks additional server identity checks must be performed when accessing mail servers. For compatibility reasons these additional checks are disabled by default in JavaMail/Jakarta Mail. The SimpleMailService in Apache Sling Commons Messaging Mail 1.0 lacks an option to enable these checks for the shared mail session. A user could enable these checks nevertheless by accessing the session via the message created by SimpleMessageBuilder and setting the property mail.smtps.ssl.checkserveridentity to true. Apache Sling Commons Messaging Mail 2.0 adds support for enabling server identity checks and these checks are enabled by default. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429", id: "GSD-2021-44549", }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2021-44549", ], details: "Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via SMTPS. To reduce the risk of \"man in the middle\" attacks additional server identity checks must be performed when accessing mail servers. For compatibility reasons these additional checks are disabled by default in JavaMail/Jakarta Mail. The SimpleMailService in Apache Sling Commons Messaging Mail 1.0 lacks an option to enable these checks for the shared mail session. A user could enable these checks nevertheless by accessing the session via the message created by SimpleMessageBuilder and setting the property mail.smtps.ssl.checkserveridentity to true. Apache Sling Commons Messaging Mail 2.0 adds support for enabling server identity checks and these checks are enabled by default. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429", id: "GSD-2021-44549", modified: "2023-12-13T01:23:20.652025Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "security@apache.org", ID: "CVE-2021-44549", STATE: "PUBLIC", TITLE: "SMTPS server hostname not checked when making TLS connection to SMTPS server", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "Apache Sling Commons Messaging Mail", version: { version_data: [ { version_affected: "=", version_name: "Apache Sling Commons Messaging Mail 1.0.0", version_value: "1.0.0", }, ], }, }, ], }, vendor_name: "Apache Software Foundation", }, ], }, }, credit: [ { lang: "eng", value: "The issue was reported by Michael Lescisin.", }, ], data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via SMTPS. To reduce the risk of \"man in the middle\" attacks additional server identity checks must be performed when accessing mail servers. For compatibility reasons these additional checks are disabled by default in JavaMail/Jakarta Mail. The SimpleMailService in Apache Sling Commons Messaging Mail 1.0 lacks an option to enable these checks for the shared mail session. A user could enable these checks nevertheless by accessing the session via the message created by SimpleMessageBuilder and setting the property mail.smtps.ssl.checkserveridentity to true. Apache Sling Commons Messaging Mail 2.0 adds support for enabling server identity checks and these checks are enabled by default. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429", }, ], }, generator: { engine: "Vulnogram 0.0.9", }, impact: [ { other: "low", }, ], problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "CWE-295: Improper Certificate Validation, CWE-297: Improper Validation of Certificate with Host Mismatch", }, ], }, ], }, references: { reference_data: [ { name: "https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f", refsource: "MISC", url: "https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f", }, ], }, source: { discovery: "UNKNOWN", }, work_around: [ { lang: "eng", value: "Set the property mail.smtps.ssl.checkserveridentity to true via message's session.", }, ], }, "gitlab.com": { advisories: [ { affected_range: "(,2.0)", affected_versions: "All versions before 2.0", cvss_v2: "AV:N/AC:M/Au:N/C:P/I:P/A:N", cvss_v3: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", cwe_ids: [ "CWE-1035", "CWE-295", "CWE-937", ], date: "2022-01-04", description: "Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via SMTPS. To reduce the risk of \"man in the middle\" attacks additional server identity checks must be performed when accessing mail servers. For compatibility reasons these additional checks are disabled by default in JavaMail/Jakarta Mail. The SimpleMailService in Apache Sling Commons Messaging Mail 1.0 lacks an option to enable these checks for the shared mail session. A user could enable these checks nevertheless by accessing the session via the message created by SimpleMessageBuilder and setting the property mail.smtps.ssl.checkserveridentity to true. Apache Sling Commons Messaging Mail 2.0 adds support for enabling server identity checks and these checks are enabled by default. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429", fixed_versions: [ "2.0", ], identifier: "CVE-2021-44549", identifiers: [ "GHSA-c69w-jj56-834w", "CVE-2021-44549", ], not_impacted: "All versions starting from 2.0", package_slug: "maven/org.apache.sling/org.apache.sling.commons.messaging.mail", pubdate: "2021-12-16", solution: "Upgrade to version 2.0 or above.", title: "Improper Certificate Validation", urls: [ "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", "https://github.com/eclipse-ee4j/mail/issues/429", "https://javaee.github.io/javamail/docs/SSLNOTES.txt", "https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html", "https://github.com/advisories/GHSA-c69w-jj56-834w", ], uuid: "7e35e589-8d71-4807-bdfd-7670b94fd2d1", }, ], }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:apache:sling_commons_messaging_mail:1.0.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "security@apache.org", ID: "CVE-2021-44549", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via SMTPS. To reduce the risk of \"man in the middle\" attacks additional server identity checks must be performed when accessing mail servers. For compatibility reasons these additional checks are disabled by default in JavaMail/Jakarta Mail. The SimpleMailService in Apache Sling Commons Messaging Mail 1.0 lacks an option to enable these checks for the shared mail session. A user could enable these checks nevertheless by accessing the session via the message created by SimpleMessageBuilder and setting the property mail.smtps.ssl.checkserveridentity to true. Apache Sling Commons Messaging Mail 2.0 adds support for enabling server identity checks and these checks are enabled by default. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "CWE-295", }, ], }, ], }, references: { reference_data: [ { name: "https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f", refsource: "MISC", tags: [ "Mailing List", "Vendor Advisory", ], url: "https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f", }, ], }, }, impact: { baseMetricV2: { acInsufInfo: false, cvssV2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 5.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:N", version: "2.0", }, exploitabilityScore: 8.6, impactScore: 4.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "MEDIUM", userInteractionRequired: false, }, baseMetricV3: { cvssV3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, exploitabilityScore: 2.2, impactScore: 5.2, }, }, lastModifiedDate: "2021-12-21T16:16Z", publishedDate: "2021-12-14T16:15Z", }, }, }
fkie_cve-2021-44549
Vulnerability from fkie_nvd
▼ | URL | Tags | |
---|---|---|---|
security@apache.org | https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f | Mailing List, Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f | Mailing List, Vendor Advisory |
Vendor | Product | Version | |
---|---|---|---|
apache | sling_commons_messaging_mail | 1.0.0 |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:apache:sling_commons_messaging_mail:1.0.0:*:*:*:*:*:*:*", matchCriteriaId: "32B6D607-277A-4C47-82F7-D205229B331A", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via SMTPS. To reduce the risk of \"man in the middle\" attacks additional server identity checks must be performed when accessing mail servers. For compatibility reasons these additional checks are disabled by default in JavaMail/Jakarta Mail. The SimpleMailService in Apache Sling Commons Messaging Mail 1.0 lacks an option to enable these checks for the shared mail session. A user could enable these checks nevertheless by accessing the session via the message created by SimpleMessageBuilder and setting the property mail.smtps.ssl.checkserveridentity to true. Apache Sling Commons Messaging Mail 2.0 adds support for enabling server identity checks and these checks are enabled by default. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429", }, { lang: "es", value: "Apache Sling Commons Messaging Mail proporciona una capa sencilla sobre JavaMail/Jakarta Mail para OSGi para enviar correos por medio de SMTPS. Para reducir el riesgo de ataques de tipo \"man in the middle\" deben realizarse comprobaciones adicionales de la identidad del servidor cuando accede a los servidores de correo. Por razones de compatibilidad, estas comprobaciones adicionales están deshabilitadas por defecto en JavaMail/Jakarta Mail. El SimpleMailService de Apache Sling Commons Messaging Mail versión 1.0 carece de una opción para habilitar estas comprobaciones para la sesión de correo compartido. Sin embargo, un usuario podría habilitar estas comprobaciones accediendo a la sesión por medio del mensaje creado por SimpleMessageBuilder y estableciendo la propiedad mail.smtps.ssl.checkserveridentity a true. Apache Sling Commons Messaging Mail versión 2.0 añade soporte para habilitar las comprobaciones de identidad del servidor y estas comprobaciones están habilitadas por defecto. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429", }, ], id: "CVE-2021-44549", lastModified: "2024-11-21T06:31:12.580", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 5.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:N", version: "2.0", }, exploitabilityScore: 8.6, impactScore: 4.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], cvssMetricV31: [ { cvssData: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, exploitabilityScore: 2.2, impactScore: 5.2, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2021-12-14T16:15:09.763", references: [ { source: "security@apache.org", tags: [ "Mailing List", "Vendor Advisory", ], url: "https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Mailing List", "Vendor Advisory", ], url: "https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f", }, ], sourceIdentifier: "security@apache.org", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-295", }, ], source: "security@apache.org", type: "Secondary", }, { description: [ { lang: "en", value: "CWE-295", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
RHSA-2024:8884
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.15.\nRed Hat Product Security has rated this update as having a security impact of important.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating,\nis available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Jenkins is a continuous integration server that monitors executions of repeated\njobs, such as building a software project or jobs run by cron.\n\nSecurity Fixes:\n\n* jenkins: Item creation restriction bypass vulnerability (CVE-2024-47804)\n* jenkins: Exposure of multi-line secrets through error messages (CVE-2024-47803)\n* jenkins: Enabling Secure Server Identity Checks for Safer SMTPS Communication (CVE-2021-44549)\n* jenkins: Denial of service when processing a specially crafted Spring Expression Language expression (CVE-2024-38808)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments,\nand other related information, refer to the CVE page listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2024:8884", url: "https://access.redhat.com/errata/RHSA-2024:8884", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8884.json", }, ], title: "Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 Openshift Jenkins security update", tracking: { current_release_date: "2025-01-30T06:26:13+00:00", generator: { date: "2025-01-30T06:26:13+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2024:8884", initial_release_date: "2024-11-05T11:25:56+00:00", revision_history: [ { date: "2024-11-05T11:25:56+00:00", number: "1", summary: "Initial version", }, { date: "2024-11-05T11:25:56+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-30T06:26:13+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "OpenShift Developer Tools and Services for OCP 4.15", product: { name: "OpenShift Developer Tools and Services for OCP 4.15", product_id: "8Base-OCP-Tools-4.15", product_identification_helper: { cpe: "cpe:/a:redhat:ocp_tools:4.15::el8", }, }, }, ], category: "product_family", name: "OpenShift Jenkins", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729837947-3.el8.src", product: { name: "jenkins-0:2.462.3.1729837947-3.el8.src", product_id: "jenkins-0:2.462.3.1729837947-3.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729837947-3.el8?arch=src", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.src", product: { name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.src", product_id: "jenkins-2-plugins-0:4.15.1729838165-1.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.15.1729838165-1.el8?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729837947-3.el8.noarch", product: { name: "jenkins-0:2.462.3.1729837947-3.el8.noarch", product_id: "jenkins-0:2.462.3.1729837947-3.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729837947-3.el8?arch=noarch", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", product: { name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", product_id: "jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.15.1729838165-1.el8?arch=noarch", }, }, }, ], category: "architecture", name: "noarch", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729837947-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.15", product_id: "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", }, product_reference: "jenkins-0:2.462.3.1729837947-3.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.15", }, { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729837947-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.15", product_id: "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", }, product_reference: "jenkins-0:2.462.3.1729837947-3.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.15", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.15", product_id: "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", }, product_reference: "jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.15", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.15", product_id: "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", }, product_reference: "jenkins-2-plugins-0:4.15.1729838165-1.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.15", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, discovery_date: "2024-10-01T01:34:34.576000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2315808", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Sling Commons Messaging Mail(angus-mail), which provides a simple interface for sending emails via SMTPS in OSGi, does not offer an option to enable server identity checks, leaving connections vulnerable to \"man-in-the-middle\" attacks and can allow insecure email communication.", title: "Vulnerability description", }, { category: "summary", text: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", title: "Vulnerability summary", }, { category: "other", text: "This vulnerability should be considered of important severity rather than moderate because it directly impacts the integrity and confidentiality of email communications over SMTPS. By disabling server identity checks, it leaves the communication channel vulnerable to \"man-in-the-middle\" (MITM) attacks, where an attacker could intercept, alter, or eavesdrop on email traffic by impersonating the legitimate mail server.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2021-44549", }, { category: "external", summary: "RHBZ#2315808", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2315808", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2021-44549", url: "https://www.cve.org/CVERecord?id=CVE-2021-44549", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", url: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", }, ], release_date: "2023-11-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:25:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8884", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", }, { cve: "CVE-2024-38808", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, discovery_date: "2024-08-20T08:20:06.895124+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2305959", }, ], notes: [ { category: "description", text: "A flaw was found in the Spring framework package. A maliciously crafted Spring Expression Language (SePL) may trigger uncontrolled CPU usage, leading to a denial of service in the application consuming it. To be considered vulnerable, one application has to evaluate user-supplied SpEL expressions.", title: "Vulnerability description", }, { category: "summary", text: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-38808", }, { category: "external", summary: "RHBZ#2305959", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2305959", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-38808", url: "https://www.cve.org/CVERecord?id=CVE-2024-38808", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", }, { category: "external", summary: "https://spring.io/security/cve-2024-38808", url: "https://spring.io/security/cve-2024-38808", }, ], release_date: "2024-08-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:25:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8884", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", }, { cve: "CVE-2024-47803", cwe: { id: "CWE-209", name: "Generation of Error Message Containing Sensitive Information", }, discovery_date: "2024-10-02T16:03:47.127227+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316137", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Exposure of multi-line secrets through error messages", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47803", }, { category: "external", summary: "RHBZ#2316137", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316137", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47803", url: "https://www.cve.org/CVERecord?id=CVE-2024-47803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", }, ], release_date: "2024-10-02T15:35:02.392000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:25:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8884", }, { category: "workaround", details: "Mitigation for this issue is ei ther not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Exposure of multi-line secrets through error messages", }, { cve: "CVE-2024-47804", cwe: { id: "CWE-1220", name: "Insufficient Granularity of Access Control", }, discovery_date: "2024-10-02T16:01:28.440675+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316131", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. When attempting to create an item prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API, if either of these checks fail, Jenkins creates the item in memory and only deletes it from disk. This may allow an attacker with the Item/Configure permission to save the item, effectively bypassing the item creation restriction.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Item creation restriction bypass vulnerability", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47804", }, { category: "external", summary: "RHBZ#2316131", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316131", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47804", url: "https://www.cve.org/CVERecord?id=CVE-2024-47804", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", }, ], release_date: "2024-10-02T15:35:03.020000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:25:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8884", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Item creation restriction bypass vulnerability", }, ], }
RHSA-2024:8887
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.13.\nRed Hat Product Security has rated this update as having a security impact of important.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating,\nis available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Jenkins is a continuous integration server that monitors executions of repeated\njobs, such as building a software project or jobs run by cron.\n\nSecurity Fix(es):\n\n* jenkins: Item creation restriction bypass vulnerability (CVE-2024-47804)\n* jenkins: Exposure of multi-line secrets through error messages\n(CVE-2024-47803)\n* jenkins: Enabling Secure Server Identity Checks for Safer SMTPS Communication\n(CVE-2021-44549)\n* jenkins: Denial of service when processing a specially crafted Spring Expression Language expression (CVE-2024-38808)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments,\nand other related information, refer to the CVE page listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2024:8887", url: "https://access.redhat.com/errata/RHSA-2024:8887", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8887.json", }, ], title: "Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 Openshift Jenkins security update", tracking: { current_release_date: "2025-01-30T06:26:38+00:00", generator: { date: "2025-01-30T06:26:38+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2024:8887", initial_release_date: "2024-11-05T12:08:31+00:00", revision_history: [ { date: "2024-11-05T12:08:31+00:00", number: "1", summary: "Initial version", }, { date: "2024-11-05T12:08:31+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-30T06:26:38+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "OpenShift Developer Tools and Services for OCP 4.13", product: { name: "OpenShift Developer Tools and Services for OCP 4.13", product_id: "8Base-OCP-Tools-4.13", product_identification_helper: { cpe: "cpe:/a:redhat:ocp_tools:4.13::el8", }, }, }, ], category: "product_family", name: "OpenShift Jenkins", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729839924-3.el8.src", product: { name: "jenkins-0:2.462.3.1729839924-3.el8.src", product_id: "jenkins-0:2.462.3.1729839924-3.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729839924-3.el8?arch=src", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.src", product: { name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.src", product_id: "jenkins-2-plugins-0:4.13.1729840148-1.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.13.1729840148-1.el8?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729839924-3.el8.noarch", product: { name: "jenkins-0:2.462.3.1729839924-3.el8.noarch", product_id: "jenkins-0:2.462.3.1729839924-3.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729839924-3.el8?arch=noarch", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", product: { name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", product_id: "jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.13.1729840148-1.el8?arch=noarch", }, }, }, ], category: "architecture", name: "noarch", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729839924-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.13", product_id: "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", }, product_reference: "jenkins-0:2.462.3.1729839924-3.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.13", }, { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729839924-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.13", product_id: "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", }, product_reference: "jenkins-0:2.462.3.1729839924-3.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.13", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.13", product_id: "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", }, product_reference: "jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.13", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.13", product_id: "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", }, product_reference: "jenkins-2-plugins-0:4.13.1729840148-1.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.13", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, discovery_date: "2024-10-01T01:34:34.576000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2315808", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Sling Commons Messaging Mail(angus-mail), which provides a simple interface for sending emails via SMTPS in OSGi, does not offer an option to enable server identity checks, leaving connections vulnerable to \"man-in-the-middle\" attacks and can allow insecure email communication.", title: "Vulnerability description", }, { category: "summary", text: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", title: "Vulnerability summary", }, { category: "other", text: "This vulnerability should be considered of important severity rather than moderate because it directly impacts the integrity and confidentiality of email communications over SMTPS. By disabling server identity checks, it leaves the communication channel vulnerable to \"man-in-the-middle\" (MITM) attacks, where an attacker could intercept, alter, or eavesdrop on email traffic by impersonating the legitimate mail server.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2021-44549", }, { category: "external", summary: "RHBZ#2315808", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2315808", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2021-44549", url: "https://www.cve.org/CVERecord?id=CVE-2021-44549", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", url: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", }, ], release_date: "2023-11-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:08:31+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8887", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", }, { cve: "CVE-2024-38808", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, discovery_date: "2024-08-20T08:20:06.895124+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2305959", }, ], notes: [ { category: "description", text: "A flaw was found in the Spring framework package. A maliciously crafted Spring Expression Language (SePL) may trigger uncontrolled CPU usage, leading to a denial of service in the application consuming it. To be considered vulnerable, one application has to evaluate user-supplied SpEL expressions.", title: "Vulnerability description", }, { category: "summary", text: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-38808", }, { category: "external", summary: "RHBZ#2305959", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2305959", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-38808", url: "https://www.cve.org/CVERecord?id=CVE-2024-38808", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", }, { category: "external", summary: "https://spring.io/security/cve-2024-38808", url: "https://spring.io/security/cve-2024-38808", }, ], release_date: "2024-08-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:08:31+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8887", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", }, { cve: "CVE-2024-47803", cwe: { id: "CWE-209", name: "Generation of Error Message Containing Sensitive Information", }, discovery_date: "2024-10-02T16:03:47.127227+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316137", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Exposure of multi-line secrets through error messages", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47803", }, { category: "external", summary: "RHBZ#2316137", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316137", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47803", url: "https://www.cve.org/CVERecord?id=CVE-2024-47803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", }, ], release_date: "2024-10-02T15:35:02.392000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:08:31+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8887", }, { category: "workaround", details: "Mitigation for this issue is ei ther not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Exposure of multi-line secrets through error messages", }, { cve: "CVE-2024-47804", cwe: { id: "CWE-1220", name: "Insufficient Granularity of Access Control", }, discovery_date: "2024-10-02T16:01:28.440675+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316131", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. When attempting to create an item prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API, if either of these checks fail, Jenkins creates the item in memory and only deletes it from disk. This may allow an attacker with the Item/Configure permission to save the item, effectively bypassing the item creation restriction.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Item creation restriction bypass vulnerability", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47804", }, { category: "external", summary: "RHBZ#2316131", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316131", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47804", url: "https://www.cve.org/CVERecord?id=CVE-2024-47804", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", }, ], release_date: "2024-10-02T15:35:03.020000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:08:31+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8887", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Item creation restriction bypass vulnerability", }, ], }
rhsa-2024:8887
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.13.\nRed Hat Product Security has rated this update as having a security impact of important.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating,\nis available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Jenkins is a continuous integration server that monitors executions of repeated\njobs, such as building a software project or jobs run by cron.\n\nSecurity Fix(es):\n\n* jenkins: Item creation restriction bypass vulnerability (CVE-2024-47804)\n* jenkins: Exposure of multi-line secrets through error messages\n(CVE-2024-47803)\n* jenkins: Enabling Secure Server Identity Checks for Safer SMTPS Communication\n(CVE-2021-44549)\n* jenkins: Denial of service when processing a specially crafted Spring Expression Language expression (CVE-2024-38808)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments,\nand other related information, refer to the CVE page listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2024:8887", url: "https://access.redhat.com/errata/RHSA-2024:8887", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8887.json", }, ], title: "Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 Openshift Jenkins security update", tracking: { current_release_date: "2025-01-30T06:26:38+00:00", generator: { date: "2025-01-30T06:26:38+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2024:8887", initial_release_date: "2024-11-05T12:08:31+00:00", revision_history: [ { date: "2024-11-05T12:08:31+00:00", number: "1", summary: "Initial version", }, { date: "2024-11-05T12:08:31+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-30T06:26:38+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "OpenShift Developer Tools and Services for OCP 4.13", product: { name: "OpenShift Developer Tools and Services for OCP 4.13", product_id: "8Base-OCP-Tools-4.13", product_identification_helper: { cpe: "cpe:/a:redhat:ocp_tools:4.13::el8", }, }, }, ], category: "product_family", name: "OpenShift Jenkins", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729839924-3.el8.src", product: { name: "jenkins-0:2.462.3.1729839924-3.el8.src", product_id: "jenkins-0:2.462.3.1729839924-3.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729839924-3.el8?arch=src", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.src", product: { name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.src", product_id: "jenkins-2-plugins-0:4.13.1729840148-1.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.13.1729840148-1.el8?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729839924-3.el8.noarch", product: { name: "jenkins-0:2.462.3.1729839924-3.el8.noarch", product_id: "jenkins-0:2.462.3.1729839924-3.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729839924-3.el8?arch=noarch", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", product: { name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", product_id: "jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.13.1729840148-1.el8?arch=noarch", }, }, }, ], category: "architecture", name: "noarch", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729839924-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.13", product_id: "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", }, product_reference: "jenkins-0:2.462.3.1729839924-3.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.13", }, { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729839924-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.13", product_id: "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", }, product_reference: "jenkins-0:2.462.3.1729839924-3.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.13", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.13", product_id: "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", }, product_reference: "jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.13", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.13", product_id: "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", }, product_reference: "jenkins-2-plugins-0:4.13.1729840148-1.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.13", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, discovery_date: "2024-10-01T01:34:34.576000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2315808", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Sling Commons Messaging Mail(angus-mail), which provides a simple interface for sending emails via SMTPS in OSGi, does not offer an option to enable server identity checks, leaving connections vulnerable to \"man-in-the-middle\" attacks and can allow insecure email communication.", title: "Vulnerability description", }, { category: "summary", text: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", title: "Vulnerability summary", }, { category: "other", text: "This vulnerability should be considered of important severity rather than moderate because it directly impacts the integrity and confidentiality of email communications over SMTPS. By disabling server identity checks, it leaves the communication channel vulnerable to \"man-in-the-middle\" (MITM) attacks, where an attacker could intercept, alter, or eavesdrop on email traffic by impersonating the legitimate mail server.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2021-44549", }, { category: "external", summary: "RHBZ#2315808", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2315808", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2021-44549", url: "https://www.cve.org/CVERecord?id=CVE-2021-44549", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", url: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", }, ], release_date: "2023-11-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:08:31+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8887", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", }, { cve: "CVE-2024-38808", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, discovery_date: "2024-08-20T08:20:06.895124+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2305959", }, ], notes: [ { category: "description", text: "A flaw was found in the Spring framework package. A maliciously crafted Spring Expression Language (SePL) may trigger uncontrolled CPU usage, leading to a denial of service in the application consuming it. To be considered vulnerable, one application has to evaluate user-supplied SpEL expressions.", title: "Vulnerability description", }, { category: "summary", text: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-38808", }, { category: "external", summary: "RHBZ#2305959", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2305959", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-38808", url: "https://www.cve.org/CVERecord?id=CVE-2024-38808", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", }, { category: "external", summary: "https://spring.io/security/cve-2024-38808", url: "https://spring.io/security/cve-2024-38808", }, ], release_date: "2024-08-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:08:31+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8887", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", }, { cve: "CVE-2024-47803", cwe: { id: "CWE-209", name: "Generation of Error Message Containing Sensitive Information", }, discovery_date: "2024-10-02T16:03:47.127227+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316137", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Exposure of multi-line secrets through error messages", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47803", }, { category: "external", summary: "RHBZ#2316137", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316137", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47803", url: "https://www.cve.org/CVERecord?id=CVE-2024-47803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", }, ], release_date: "2024-10-02T15:35:02.392000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:08:31+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8887", }, { category: "workaround", details: "Mitigation for this issue is ei ther not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Exposure of multi-line secrets through error messages", }, { cve: "CVE-2024-47804", cwe: { id: "CWE-1220", name: "Insufficient Granularity of Access Control", }, discovery_date: "2024-10-02T16:01:28.440675+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316131", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. When attempting to create an item prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API, if either of these checks fail, Jenkins creates the item in memory and only deletes it from disk. This may allow an attacker with the Item/Configure permission to save the item, effectively bypassing the item creation restriction.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Item creation restriction bypass vulnerability", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47804", }, { category: "external", summary: "RHBZ#2316131", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316131", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47804", url: "https://www.cve.org/CVERecord?id=CVE-2024-47804", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", }, ], release_date: "2024-10-02T15:35:03.020000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:08:31+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8887", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Item creation restriction bypass vulnerability", }, ], }
RHSA-2024:8886
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.12.\nRed Hat Product Security has rated this update as having a security impact of important.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating,\nis available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Jenkins is a continuous integration server that monitors executions of repeated\njobs, such as building a software project or jobs run by cron.\n\nSecurity Fix(es):\n\n* jenkins: Exposure of multi-line secrets through error messages (CVE-2024-47803)\n* jenkins: Item creation restriction bypass vulnerability (CVE-2024-47804)\n* jenkins: Enabling Secure Server Identity Checks for Safer SMTPS Communication (CVE-2021-44549)\n* jenkins: Denial of service when processing a specially crafted Spring Expression Language expression (CVE-2024-38808)\n* jenkins-2-plugins: jenkins-plugin/script-security: sandbox bypass via crafted constructor bodies (CVE-2024-34144)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments,\nand other related information, refer to the CVE page listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2024:8886", url: "https://access.redhat.com/errata/RHSA-2024:8886", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8886.json", }, ], title: "Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update", tracking: { current_release_date: "2025-01-30T06:26:50+00:00", generator: { date: "2025-01-30T06:26:50+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2024:8886", initial_release_date: "2024-11-05T12:07:46+00:00", revision_history: [ { date: "2024-11-05T12:07:46+00:00", number: "1", summary: "Initial version", }, { date: "2024-11-05T12:07:46+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-30T06:26:50+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "OpenShift Developer Tools and Services for OCP 4.12", product: { name: "OpenShift Developer Tools and Services for OCP 4.12", product_id: "8Base-OCP-Tools-4.12", product_identification_helper: { cpe: "cpe:/a:redhat:ocp_tools:4.12::el8", }, }, }, ], category: "product_family", name: "OpenShift Jenkins", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1730119132-3.el8.src", product: { name: "jenkins-0:2.462.3.1730119132-3.el8.src", product_id: "jenkins-0:2.462.3.1730119132-3.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1730119132-3.el8?arch=src", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.src", product: { name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.src", product_id: "jenkins-2-plugins-0:4.12.1730119231-1.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.12.1730119231-1.el8?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1730119132-3.el8.noarch", product: { name: "jenkins-0:2.462.3.1730119132-3.el8.noarch", product_id: "jenkins-0:2.462.3.1730119132-3.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1730119132-3.el8?arch=noarch", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", product: { name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", product_id: "jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.12.1730119231-1.el8?arch=noarch", }, }, }, ], category: "architecture", name: "noarch", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1730119132-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.12", product_id: "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", }, product_reference: "jenkins-0:2.462.3.1730119132-3.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.12", }, { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1730119132-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.12", product_id: "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", }, product_reference: "jenkins-0:2.462.3.1730119132-3.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.12", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.12", product_id: "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", }, product_reference: "jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.12", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.12", product_id: "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", }, product_reference: "jenkins-2-plugins-0:4.12.1730119231-1.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.12", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, discovery_date: "2024-10-01T01:34:34.576000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2315808", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Sling Commons Messaging Mail(angus-mail), which provides a simple interface for sending emails via SMTPS in OSGi, does not offer an option to enable server identity checks, leaving connections vulnerable to \"man-in-the-middle\" attacks and can allow insecure email communication.", title: "Vulnerability description", }, { category: "summary", text: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", title: "Vulnerability summary", }, { category: "other", text: "This vulnerability should be considered of important severity rather than moderate because it directly impacts the integrity and confidentiality of email communications over SMTPS. By disabling server identity checks, it leaves the communication channel vulnerable to \"man-in-the-middle\" (MITM) attacks, where an attacker could intercept, alter, or eavesdrop on email traffic by impersonating the legitimate mail server.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2021-44549", }, { category: "external", summary: "RHBZ#2315808", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2315808", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2021-44549", url: "https://www.cve.org/CVERecord?id=CVE-2021-44549", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", url: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", }, ], release_date: "2023-11-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:07:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8886", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", }, { cve: "CVE-2024-34144", cwe: { id: "CWE-693", name: "Protection Mechanism Failure", }, discovery_date: "2024-05-03T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2278820", }, ], notes: [ { category: "description", text: "A sandbox bypass vulnerability was found in the Jenkins Script Security Plugin involving crafted constructor bodies, enabling the circumvention of security restrictions. With crafted constructor bodies, this flaw allows authenticated attackers to define and execute sandboxed scripts, including Pipelines, bypassing sandbox protection mechanisms and executing arbitrary code within the context of the Jenkins controller JVM.\r\n\r\nThe Script Security Plugin features a sandbox functionality designed to enable users with limited privileges to create scripts, including Pipelines, which are generally safe for execution. This security mechanism intercepts calls within sandboxed scripts, referencing various allowlists to decide whether these calls should be permitted.\r\n\r\nThe vulnerabilities that allow for sandbox bypass have been identified in versions up to 1335.vf07d9ce377a_e of the Script Security Plugin. These vulnerabilities include:\r\n\r\n- Exploiting crafted constructor bodies that trigger other constructors, thereby allowing the construction of any subclassable type through implicit casts.\r\n- Utilizing Groovy classes defined within the sandbox that overshadow certain non-sandboxed classes, facilitating the creation of any subclassable type.\r\n\r\nThese vulnerabilities enable attackers, who have the permission to create and execute sandboxed scripts including Pipelines, to circumvent sandbox protections and execute arbitrary code within the context of the Jenkins controller JVM.\r\n\r\nThe fixed version of this script incorporates enhanced restrictions and sanity checks. These improvements ensure that calls to super constructors are intercepted by the sandbox, including:\r\n\r\n- Ensuring that calls to other constructors via 'this' are now appropriately managed within the sandbox.\r\n- No longer overlooking classes in packages that may be overshadowed by Groovy-defined classes when intercepting super constructor calls.", title: "Vulnerability description", }, { category: "summary", text: "jenkins-plugin/script-security: sandbox bypass via crafted constructor bodies", title: "Vulnerability summary", }, { category: "other", text: "Red Hat rates the security impact of this vulnerability as Important due to the worst case scenario resulting in a process being able to access resources outside an assigned sandbox.\n\nThe vulnerabilities that allow for sandbox bypass have been identified in versions up to 1335.vf07d9ce377a_e of the Script Security Plugin. These vulnerabilities include exploiting specially crafted constructor bodies, utilizing certain groovy classes.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-34144", }, { category: "external", summary: "RHBZ#2278820", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2278820", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-34144", url: "https://www.cve.org/CVERecord?id=CVE-2024-34144", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-34144", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-34144", }, { category: "external", summary: "http://www.openwall.com/lists/oss-security/2024/05/02/3", url: "http://www.openwall.com/lists/oss-security/2024/05/02/3", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341", url: "https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341", }, ], release_date: "2024-05-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:07:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8886", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "jenkins-plugin/script-security: sandbox bypass via crafted constructor bodies", }, { cve: "CVE-2024-38808", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, discovery_date: "2024-08-20T08:20:06.895124+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2305959", }, ], notes: [ { category: "description", text: "A flaw was found in the Spring framework package. A maliciously crafted Spring Expression Language (SePL) may trigger uncontrolled CPU usage, leading to a denial of service in the application consuming it. To be considered vulnerable, one application has to evaluate user-supplied SpEL expressions.", title: "Vulnerability description", }, { category: "summary", text: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-38808", }, { category: "external", summary: "RHBZ#2305959", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2305959", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-38808", url: "https://www.cve.org/CVERecord?id=CVE-2024-38808", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", }, { category: "external", summary: "https://spring.io/security/cve-2024-38808", url: "https://spring.io/security/cve-2024-38808", }, ], release_date: "2024-08-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:07:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8886", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", }, { cve: "CVE-2024-47803", cwe: { id: "CWE-209", name: "Generation of Error Message Containing Sensitive Information", }, discovery_date: "2024-10-02T16:03:47.127227+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316137", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Exposure of multi-line secrets through error messages", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47803", }, { category: "external", summary: "RHBZ#2316137", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316137", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47803", url: "https://www.cve.org/CVERecord?id=CVE-2024-47803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", }, ], release_date: "2024-10-02T15:35:02.392000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:07:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8886", }, { category: "workaround", details: "Mitigation for this issue is ei ther not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Exposure of multi-line secrets through error messages", }, { cve: "CVE-2024-47804", cwe: { id: "CWE-1220", name: "Insufficient Granularity of Access Control", }, discovery_date: "2024-10-02T16:01:28.440675+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316131", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. When attempting to create an item prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API, if either of these checks fail, Jenkins creates the item in memory and only deletes it from disk. This may allow an attacker with the Item/Configure permission to save the item, effectively bypassing the item creation restriction.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Item creation restriction bypass vulnerability", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47804", }, { category: "external", summary: "RHBZ#2316131", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316131", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47804", url: "https://www.cve.org/CVERecord?id=CVE-2024-47804", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", }, ], release_date: "2024-10-02T15:35:03.020000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:07:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8886", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Item creation restriction bypass vulnerability", }, ], }
RHSA-2024:7676
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Critical", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update is now available for Red Hat build of Quarkus. \nRed Hat Product Security has rated this update as having a security impact\nof Critical. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability. For\nmore information, see the CVE links in the References section.", title: "Topic", }, { category: "general", text: "This release of Red Hat build of Quarkus 3.2.12.SP1 contains security updates. For more information, see the release notes\npage listed in the References section.\n\nSecurity Fix(es):\n\n* com.google.protobuf/protobuf: StackOverflow vulnerability in Protocol Buffers (CVE-2024-7254)\n\n* org.eclipse.angus/angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication (CVE-2021-44549)\n\n* com.graphql-java.graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java (CVE-2024-40094)\n\n* org.apache.avro/avro: Schema parsing may trigger Remote Code Execution (RCE) (CVE-2024-47561)", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2024:7676", url: "https://access.redhat.com/errata/RHSA-2024:7676", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#critical", url: "https://access.redhat.com/security/updates/classification/#critical", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7676.json", }, ], title: "Red Hat Security Advisory: Red Hat build of Quarkus 3.2.12.SP1 Security Update", tracking: { current_release_date: "2025-02-18T14:27:14+00:00", generator: { date: "2025-02-18T14:27:14+00:00", engine: { name: "Red Hat SDEngine", version: "4.3.1", }, }, id: "RHSA-2024:7676", initial_release_date: "2024-10-10T13:43:59+00:00", revision_history: [ { date: "2024-10-10T13:43:59+00:00", number: "1", summary: "Initial version", }, { date: "2024-10-10T13:43:59+00:00", number: "2", summary: "Last updated version", }, { date: "2025-02-18T14:27:14+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat build of Quarkus 3.2", product: { name: "Red Hat build of Quarkus 3.2", product_id: "Red Hat build of Quarkus 3.2", product_identification_helper: { cpe: "cpe:/a:redhat:quarkus:3.2::el8", }, }, }, ], category: "product_family", name: "Red Hat build of Quarkus", }, ], category: "vendor", name: "Red Hat", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, discovery_date: "2024-10-01T01:34:34.576000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2315808", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Sling Commons Messaging Mail(angus-mail), which provides a simple interface for sending emails via SMTPS in OSGi, does not offer an option to enable server identity checks, leaving connections vulnerable to \"man-in-the-middle\" attacks and can allow insecure email communication.", title: "Vulnerability description", }, { category: "summary", text: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", title: "Vulnerability summary", }, { category: "other", text: "This vulnerability should be considered of important severity rather than moderate because it directly impacts the integrity and confidentiality of email communications over SMTPS. By disabling server identity checks, it leaves the communication channel vulnerable to \"man-in-the-middle\" (MITM) attacks, where an attacker could intercept, alter, or eavesdrop on email traffic by impersonating the legitimate mail server.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "Red Hat build of Quarkus 3.2", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2021-44549", }, { category: "external", summary: "RHBZ#2315808", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2315808", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2021-44549", url: "https://www.cve.org/CVERecord?id=CVE-2021-44549", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", url: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", }, ], release_date: "2023-11-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-10-10T13:43:59+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "Red Hat build of Quarkus 3.2", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:7676", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "Red Hat build of Quarkus 3.2", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, products: [ "Red Hat build of Quarkus 3.2", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", }, { cve: "CVE-2024-7254", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2024-09-19T01:20:29.981665+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2313454", }, ], notes: [ { category: "description", text: "A flaw was found in Protocol Buffers (protobuf). This issue can allows an attacker to cause a StackOverflow via parsing untrusted Protocol Buffers data containing arbitrarily nested SGROUP tags, leading to unbounded recursion.", title: "Vulnerability description", }, { category: "summary", text: "protobuf: StackOverflow vulnerability in Protocol Buffers", title: "Vulnerability summary", }, { category: "other", text: "This issue represents a significant severity risk because unbounded recursion in Protocol Buffers parsing can be exploited to trigger stack overflows, leading to Denial of Service (DoS). When parsers, such as `DiscardUnknownFieldsParser` or the Java Protobuf Lite parser, encounter arbitrarily nested groups or deeply recursive map fields, the lack of recursion depth limits can result in uncontrolled stack growth. Attackers can craft malicious protobuf messages that deliberately exceed the stack's capacity, causing the application to crash or become unresponsive.\n\nThe protobuf package as shipped in RHEL does not include the affected java or kotlin bindings, therefore RHEL is Not Affected.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "Red Hat build of Quarkus 3.2", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-7254", }, { category: "external", summary: "RHBZ#2313454", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2313454", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-7254", url: "https://www.cve.org/CVERecord?id=CVE-2024-7254", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-7254", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-7254", }, { category: "external", summary: "https://github.com/protocolbuffers/protobuf/commit/cc8b3483a5584b3301e3d43d17eb59704857ffaa", url: "https://github.com/protocolbuffers/protobuf/commit/cc8b3483a5584b3301e3d43d17eb59704857ffaa", }, ], release_date: "2024-09-19T01:15:10.963000+00:00", remediations: [ { category: "vendor_fix", date: "2024-10-10T13:43:59+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "Red Hat build of Quarkus 3.2", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:7676", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "Red Hat build of Quarkus 3.2", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "Red Hat build of Quarkus 3.2", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "protobuf: StackOverflow vulnerability in Protocol Buffers", }, { cve: "CVE-2024-40094", cwe: { id: "CWE-770", name: "Allocation of Resources Without Limits or Throttling", }, discovery_date: "2024-07-30T07:20:08+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2301456", }, ], notes: [ { category: "description", text: "A vulnerability was found in GraphQL Java, affecting versions prior to 21.5. This flaw allows an attacker to perform a denial of service (DoS) attack via introspection queries. The issue arises due to the improper handling of ExecutableNormalizedFields (ENFs), which are not adequately considered during the introspection query process. This issue could lead to resource exhaustion and service disruption under certain conditions.", title: "Vulnerability description", }, { category: "summary", text: "graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "Red Hat build of Quarkus 3.2", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-40094", }, { category: "external", summary: "RHBZ#2301456", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2301456", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-40094", url: "https://www.cve.org/CVERecord?id=CVE-2024-40094", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-40094", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-40094", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/commit/97743bc1b5caa2b0bd894dc8e128b47e4d771e4a", url: "https://github.com/graphql-java/graphql-java/commit/97743bc1b5caa2b0bd894dc8e128b47e4d771e4a", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/discussions/3641", url: "https://github.com/graphql-java/graphql-java/discussions/3641", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/pull/3539", url: "https://github.com/graphql-java/graphql-java/pull/3539", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/releases/tag/v19.11", url: "https://github.com/graphql-java/graphql-java/releases/tag/v19.11", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/releases/tag/v20.9", url: "https://github.com/graphql-java/graphql-java/releases/tag/v20.9", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/releases/tag/v21.5", url: "https://github.com/graphql-java/graphql-java/releases/tag/v21.5", }, ], release_date: "2024-07-30T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-10-10T13:43:59+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "Red Hat build of Quarkus 3.2", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:7676", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "Red Hat build of Quarkus 3.2", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java", }, { cve: "CVE-2024-47561", cwe: { id: "CWE-502", name: "Deserialization of Untrusted Data", }, discovery_date: "2024-10-02T14:04:06.018000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316116", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Avro. The project is affected and at risk if it accepts an org.apache.Avro/avroAvro schema for parsing provided by an end user. This flaw allows an attacker to trigger remote code execution by using the special \"java-class\" attribute.", title: "Vulnerability description", }, { category: "summary", text: "apache-avro: Schema parsing may trigger Remote Code Execution (RCE)", title: "Vulnerability summary", }, { category: "other", text: "The Red Hat build of Apache Camel K 1.10 was rated Important as it allows users to provide an Avro schema for parsing. Note that this functionality is limited to authenticated users.\n\nRed Hat Single Sign-On 7 ships the affected component in its maven repository but does not use it in the product. As such it is affected but not vulnerable to the flaw, and is assessed at Moderate security impact.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "Red Hat build of Quarkus 3.2", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47561", }, { category: "external", summary: "RHBZ#2316116", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316116", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47561", url: "https://www.cve.org/CVERecord?id=CVE-2024-47561", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47561", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47561", }, ], release_date: "2024-10-03T12:20:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-10-10T13:43:59+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "Red Hat build of Quarkus 3.2", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:7676", }, { category: "workaround", details: "1. Avoid parsing user-provided schemas.\n2. Ensure proper input validation and sanitization of schemas before parsing.\n3. Monitor systems for any unusual activities that may indicate exploitation attempts.\n4. Apply the principle of least privilege to minimize the potential impact of successful exploits.", product_ids: [ "Red Hat build of Quarkus 3.2", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "Red Hat build of Quarkus 3.2", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "apache-avro: Schema parsing may trigger Remote Code Execution (RCE)", }, ], }
rhsa-2024_8886
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.12.\nRed Hat Product Security has rated this update as having a security impact of important.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating,\nis available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Jenkins is a continuous integration server that monitors executions of repeated\njobs, such as building a software project or jobs run by cron.\n\nSecurity Fix(es):\n\n* jenkins: Exposure of multi-line secrets through error messages (CVE-2024-47803)\n* jenkins: Item creation restriction bypass vulnerability (CVE-2024-47804)\n* jenkins: Enabling Secure Server Identity Checks for Safer SMTPS Communication (CVE-2021-44549)\n* jenkins: Denial of service when processing a specially crafted Spring Expression Language expression (CVE-2024-38808)\n* jenkins-2-plugins: jenkins-plugin/script-security: sandbox bypass via crafted constructor bodies (CVE-2024-34144)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments,\nand other related information, refer to the CVE page listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2024:8886", url: "https://access.redhat.com/errata/RHSA-2024:8886", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8886.json", }, ], title: "Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update", tracking: { current_release_date: "2024-12-04T22:57:18+00:00", generator: { date: "2024-12-04T22:57:18+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.2", }, }, id: "RHSA-2024:8886", initial_release_date: "2024-11-05T12:07:46+00:00", revision_history: [ { date: "2024-11-05T12:07:46+00:00", number: "1", summary: "Initial version", }, { date: "2024-11-05T12:07:46+00:00", number: "2", summary: "Last updated version", }, { date: "2024-12-04T22:57:18+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "OpenShift Developer Tools and Services for OCP 4.12", product: { name: "OpenShift Developer Tools and Services for OCP 4.12", product_id: "8Base-OCP-Tools-4.12", product_identification_helper: { cpe: "cpe:/a:redhat:ocp_tools:4.12::el8", }, }, }, ], category: "product_family", name: "OpenShift Jenkins", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1730119132-3.el8.src", product: { name: "jenkins-0:2.462.3.1730119132-3.el8.src", product_id: "jenkins-0:2.462.3.1730119132-3.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1730119132-3.el8?arch=src", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.src", product: { name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.src", product_id: "jenkins-2-plugins-0:4.12.1730119231-1.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.12.1730119231-1.el8?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1730119132-3.el8.noarch", product: { name: "jenkins-0:2.462.3.1730119132-3.el8.noarch", product_id: "jenkins-0:2.462.3.1730119132-3.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1730119132-3.el8?arch=noarch", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", product: { name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", product_id: "jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.12.1730119231-1.el8?arch=noarch", }, }, }, ], category: "architecture", name: "noarch", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1730119132-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.12", product_id: "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", }, product_reference: "jenkins-0:2.462.3.1730119132-3.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.12", }, { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1730119132-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.12", product_id: "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", }, product_reference: "jenkins-0:2.462.3.1730119132-3.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.12", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.12", product_id: "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", }, product_reference: "jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.12", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.12", product_id: "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", }, product_reference: "jenkins-2-plugins-0:4.12.1730119231-1.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.12", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, discovery_date: "2024-10-01T01:34:34.576000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2315808", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Sling Commons Messaging Mail(angus-mail), which provides a simple interface for sending emails via SMTPS in OSGi, does not offer an option to enable server identity checks, leaving connections vulnerable to \"man-in-the-middle\" attacks and can allow insecure email communication.", title: "Vulnerability description", }, { category: "summary", text: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", title: "Vulnerability summary", }, { category: "other", text: "This vulnerability should be considered of important severity rather than moderate because it directly impacts the integrity and confidentiality of email communications over SMTPS. By disabling server identity checks, it leaves the communication channel vulnerable to \"man-in-the-middle\" (MITM) attacks, where an attacker could intercept, alter, or eavesdrop on email traffic by impersonating the legitimate mail server.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2021-44549", }, { category: "external", summary: "RHBZ#2315808", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2315808", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2021-44549", url: "https://www.cve.org/CVERecord?id=CVE-2021-44549", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", url: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", }, ], release_date: "2023-11-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:07:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8886", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", }, { cve: "CVE-2024-34144", cwe: { id: "CWE-693", name: "Protection Mechanism Failure", }, discovery_date: "2024-05-03T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2278820", }, ], notes: [ { category: "description", text: "A sandbox bypass vulnerability was found in the Jenkins Script Security Plugin involving crafted constructor bodies, enabling the circumvention of security restrictions. With crafted constructor bodies, this flaw allows authenticated attackers to define and execute sandboxed scripts, including Pipelines, bypassing sandbox protection mechanisms and executing arbitrary code within the context of the Jenkins controller JVM.\r\n\r\nThe Script Security Plugin features a sandbox functionality designed to enable users with limited privileges to create scripts, including Pipelines, which are generally safe for execution. This security mechanism intercepts calls within sandboxed scripts, referencing various allowlists to decide whether these calls should be permitted.\r\n\r\nThe vulnerabilities that allow for sandbox bypass have been identified in versions up to 1335.vf07d9ce377a_e of the Script Security Plugin. These vulnerabilities include:\r\n\r\n- Exploiting crafted constructor bodies that trigger other constructors, thereby allowing the construction of any subclassable type through implicit casts.\r\n- Utilizing Groovy classes defined within the sandbox that overshadow certain non-sandboxed classes, facilitating the creation of any subclassable type.\r\n\r\nThese vulnerabilities enable attackers, who have the permission to create and execute sandboxed scripts including Pipelines, to circumvent sandbox protections and execute arbitrary code within the context of the Jenkins controller JVM.\r\n\r\nThe fixed version of this script incorporates enhanced restrictions and sanity checks. These improvements ensure that calls to super constructors are intercepted by the sandbox, including:\r\n\r\n- Ensuring that calls to other constructors via 'this' are now appropriately managed within the sandbox.\r\n- No longer overlooking classes in packages that may be overshadowed by Groovy-defined classes when intercepting super constructor calls.", title: "Vulnerability description", }, { category: "summary", text: "jenkins-plugin/script-security: sandbox bypass via crafted constructor bodies", title: "Vulnerability summary", }, { category: "other", text: "Red Hat rates the security impact of this vulnerability as Important due to the worst case scenario resulting in a process being able to access resources outside an assigned sandbox.\n\nThe vulnerabilities that allow for sandbox bypass have been identified in versions up to 1335.vf07d9ce377a_e of the Script Security Plugin. These vulnerabilities include exploiting specially crafted constructor bodies, utilizing certain groovy classes.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-34144", }, { category: "external", summary: "RHBZ#2278820", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2278820", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-34144", url: "https://www.cve.org/CVERecord?id=CVE-2024-34144", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-34144", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-34144", }, { category: "external", summary: "http://www.openwall.com/lists/oss-security/2024/05/02/3", url: "http://www.openwall.com/lists/oss-security/2024/05/02/3", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341", url: "https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341", }, ], release_date: "2024-05-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:07:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8886", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "jenkins-plugin/script-security: sandbox bypass via crafted constructor bodies", }, { cve: "CVE-2024-38808", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, discovery_date: "2024-08-20T08:20:06.895124+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2305959", }, ], notes: [ { category: "description", text: "A flaw was found in the Spring framework package. A maliciously crafted Spring Expression Language (SePL) may trigger uncontrolled CPU usage, leading to a denial of service in the application consuming it. To be considered vulnerable, one application has to evaluate user-supplied SpEL expressions.", title: "Vulnerability description", }, { category: "summary", text: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-38808", }, { category: "external", summary: "RHBZ#2305959", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2305959", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-38808", url: "https://www.cve.org/CVERecord?id=CVE-2024-38808", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", }, { category: "external", summary: "https://spring.io/security/cve-2024-38808", url: "https://spring.io/security/cve-2024-38808", }, ], release_date: "2024-08-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:07:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8886", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", }, { cve: "CVE-2024-47803", cwe: { id: "CWE-209", name: "Generation of Error Message Containing Sensitive Information", }, discovery_date: "2024-10-02T16:03:47.127227+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316137", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Exposure of multi-line secrets through error messages", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47803", }, { category: "external", summary: "RHBZ#2316137", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316137", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47803", url: "https://www.cve.org/CVERecord?id=CVE-2024-47803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", }, ], release_date: "2024-10-02T15:35:02.392000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:07:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8886", }, { category: "workaround", details: "Mitigation for this issue is ei ther not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Exposure of multi-line secrets through error messages", }, { cve: "CVE-2024-47804", cwe: { id: "CWE-1220", name: "Insufficient Granularity of Access Control", }, discovery_date: "2024-10-02T16:01:28.440675+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316131", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. When attempting to create an item prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API, if either of these checks fail, Jenkins creates the item in memory and only deletes it from disk. This may allow an attacker with the Item/Configure permission to save the item, effectively bypassing the item creation restriction.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Item creation restriction bypass vulnerability", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47804", }, { category: "external", summary: "RHBZ#2316131", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316131", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47804", url: "https://www.cve.org/CVERecord?id=CVE-2024-47804", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", }, ], release_date: "2024-10-02T15:35:03.020000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:07:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8886", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Item creation restriction bypass vulnerability", }, ], }
rhsa-2024:8885
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.14.\nRed Hat Product Security has rated this update as having a security impact of important.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating,\nis available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Jenkins is a continuous integration server that monitors executions of repeated\njobs, such as building a software project or jobs run by cron.\n\nSecurity Fixes:\n\n* jenkins: Item creation restriction bypass vulnerability (CVE-2024-47804)\n* jenkins: Exposure of multi-line secrets through error messages\n(CVE-2024-47803)\n* jenkins: Enabling Secure Server Identity Checks for Safer SMTPS Communication (CVE-2021-44549)\n* jenkins: Denial of service when processing a specially crafted Spring Expression Language expression (CVE-2024-38808)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments,\nand other related information, refer to the CVE page listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2024:8885", url: "https://access.redhat.com/errata/RHSA-2024:8885", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8885.json", }, ], title: "Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update", tracking: { current_release_date: "2025-01-30T06:26:26+00:00", generator: { date: "2025-01-30T06:26:26+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2024:8885", initial_release_date: "2024-11-05T11:47:26+00:00", revision_history: [ { date: "2024-11-05T11:47:26+00:00", number: "1", summary: "Initial version", }, { date: "2024-11-05T11:47:26+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-30T06:26:26+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "OpenShift Developer Tools and Services for OCP 4.14", product: { name: "OpenShift Developer Tools and Services for OCP 4.14", product_id: "8Base-OCP-Tools-4.14", product_identification_helper: { cpe: "cpe:/a:redhat:ocp_tools:4.14::el8", }, }, }, ], category: "product_family", name: "OpenShift Jenkins", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729839727-3.el8.src", product: { name: "jenkins-0:2.462.3.1729839727-3.el8.src", product_id: "jenkins-0:2.462.3.1729839727-3.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729839727-3.el8?arch=src", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.src", product: { name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.src", product_id: "jenkins-2-plugins-0:4.14.1729839844-1.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.14.1729839844-1.el8?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729839727-3.el8.noarch", product: { name: "jenkins-0:2.462.3.1729839727-3.el8.noarch", product_id: "jenkins-0:2.462.3.1729839727-3.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729839727-3.el8?arch=noarch", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", product: { name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", product_id: "jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.14.1729839844-1.el8?arch=noarch", }, }, }, ], category: "architecture", name: "noarch", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729839727-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.14", product_id: "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", }, product_reference: "jenkins-0:2.462.3.1729839727-3.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.14", }, { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729839727-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.14", product_id: "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", }, product_reference: "jenkins-0:2.462.3.1729839727-3.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.14", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.14", product_id: "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", }, product_reference: "jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.14", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.14", product_id: "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", }, product_reference: "jenkins-2-plugins-0:4.14.1729839844-1.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.14", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, discovery_date: "2024-10-01T01:34:34.576000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2315808", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Sling Commons Messaging Mail(angus-mail), which provides a simple interface for sending emails via SMTPS in OSGi, does not offer an option to enable server identity checks, leaving connections vulnerable to \"man-in-the-middle\" attacks and can allow insecure email communication.", title: "Vulnerability description", }, { category: "summary", text: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", title: "Vulnerability summary", }, { category: "other", text: "This vulnerability should be considered of important severity rather than moderate because it directly impacts the integrity and confidentiality of email communications over SMTPS. By disabling server identity checks, it leaves the communication channel vulnerable to \"man-in-the-middle\" (MITM) attacks, where an attacker could intercept, alter, or eavesdrop on email traffic by impersonating the legitimate mail server.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2021-44549", }, { category: "external", summary: "RHBZ#2315808", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2315808", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2021-44549", url: "https://www.cve.org/CVERecord?id=CVE-2021-44549", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", url: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", }, ], release_date: "2023-11-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:47:26+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8885", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", }, { cve: "CVE-2024-38808", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, discovery_date: "2024-08-20T08:20:06.895124+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2305959", }, ], notes: [ { category: "description", text: "A flaw was found in the Spring framework package. A maliciously crafted Spring Expression Language (SePL) may trigger uncontrolled CPU usage, leading to a denial of service in the application consuming it. To be considered vulnerable, one application has to evaluate user-supplied SpEL expressions.", title: "Vulnerability description", }, { category: "summary", text: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-38808", }, { category: "external", summary: "RHBZ#2305959", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2305959", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-38808", url: "https://www.cve.org/CVERecord?id=CVE-2024-38808", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", }, { category: "external", summary: "https://spring.io/security/cve-2024-38808", url: "https://spring.io/security/cve-2024-38808", }, ], release_date: "2024-08-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:47:26+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8885", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", }, { cve: "CVE-2024-47803", cwe: { id: "CWE-209", name: "Generation of Error Message Containing Sensitive Information", }, discovery_date: "2024-10-02T16:03:47.127227+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316137", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Exposure of multi-line secrets through error messages", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47803", }, { category: "external", summary: "RHBZ#2316137", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316137", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47803", url: "https://www.cve.org/CVERecord?id=CVE-2024-47803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", }, ], release_date: "2024-10-02T15:35:02.392000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:47:26+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8885", }, { category: "workaround", details: "Mitigation for this issue is ei ther not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Exposure of multi-line secrets through error messages", }, { cve: "CVE-2024-47804", cwe: { id: "CWE-1220", name: "Insufficient Granularity of Access Control", }, discovery_date: "2024-10-02T16:01:28.440675+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316131", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. When attempting to create an item prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API, if either of these checks fail, Jenkins creates the item in memory and only deletes it from disk. This may allow an attacker with the Item/Configure permission to save the item, effectively bypassing the item creation restriction.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Item creation restriction bypass vulnerability", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47804", }, { category: "external", summary: "RHBZ#2316131", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316131", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47804", url: "https://www.cve.org/CVERecord?id=CVE-2024-47804", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", }, ], release_date: "2024-10-02T15:35:03.020000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:47:26+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8885", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Item creation restriction bypass vulnerability", }, ], }
rhsa-2024_8885
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.14.\nRed Hat Product Security has rated this update as having a security impact of important.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating,\nis available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Jenkins is a continuous integration server that monitors executions of repeated\njobs, such as building a software project or jobs run by cron.\n\nSecurity Fixes:\n\n* jenkins: Item creation restriction bypass vulnerability (CVE-2024-47804)\n* jenkins: Exposure of multi-line secrets through error messages\n(CVE-2024-47803)\n* jenkins: Enabling Secure Server Identity Checks for Safer SMTPS Communication (CVE-2021-44549)\n* jenkins: Denial of service when processing a specially crafted Spring Expression Language expression (CVE-2024-38808)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments,\nand other related information, refer to the CVE page listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2024:8885", url: "https://access.redhat.com/errata/RHSA-2024:8885", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8885.json", }, ], title: "Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update", tracking: { current_release_date: "2024-12-04T22:56:59+00:00", generator: { date: "2024-12-04T22:56:59+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.2", }, }, id: "RHSA-2024:8885", initial_release_date: "2024-11-05T11:47:26+00:00", revision_history: [ { date: "2024-11-05T11:47:26+00:00", number: "1", summary: "Initial version", }, { date: "2024-11-05T11:47:26+00:00", number: "2", summary: "Last updated version", }, { date: "2024-12-04T22:56:59+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "OpenShift Developer Tools and Services for OCP 4.14", product: { name: "OpenShift Developer Tools and Services for OCP 4.14", product_id: "8Base-OCP-Tools-4.14", product_identification_helper: { cpe: "cpe:/a:redhat:ocp_tools:4.14::el8", }, }, }, ], category: "product_family", name: "OpenShift Jenkins", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729839727-3.el8.src", product: { name: "jenkins-0:2.462.3.1729839727-3.el8.src", product_id: "jenkins-0:2.462.3.1729839727-3.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729839727-3.el8?arch=src", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.src", product: { name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.src", product_id: "jenkins-2-plugins-0:4.14.1729839844-1.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.14.1729839844-1.el8?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729839727-3.el8.noarch", product: { name: "jenkins-0:2.462.3.1729839727-3.el8.noarch", product_id: "jenkins-0:2.462.3.1729839727-3.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729839727-3.el8?arch=noarch", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", product: { name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", product_id: "jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.14.1729839844-1.el8?arch=noarch", }, }, }, ], category: "architecture", name: "noarch", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729839727-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.14", product_id: "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", }, product_reference: "jenkins-0:2.462.3.1729839727-3.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.14", }, { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729839727-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.14", product_id: "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", }, product_reference: "jenkins-0:2.462.3.1729839727-3.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.14", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.14", product_id: "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", }, product_reference: "jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.14", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.14", product_id: "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", }, product_reference: "jenkins-2-plugins-0:4.14.1729839844-1.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.14", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, discovery_date: "2024-10-01T01:34:34.576000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2315808", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Sling Commons Messaging Mail(angus-mail), which provides a simple interface for sending emails via SMTPS in OSGi, does not offer an option to enable server identity checks, leaving connections vulnerable to \"man-in-the-middle\" attacks and can allow insecure email communication.", title: "Vulnerability description", }, { category: "summary", text: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", title: "Vulnerability summary", }, { category: "other", text: "This vulnerability should be considered of important severity rather than moderate because it directly impacts the integrity and confidentiality of email communications over SMTPS. By disabling server identity checks, it leaves the communication channel vulnerable to \"man-in-the-middle\" (MITM) attacks, where an attacker could intercept, alter, or eavesdrop on email traffic by impersonating the legitimate mail server.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2021-44549", }, { category: "external", summary: "RHBZ#2315808", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2315808", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2021-44549", url: "https://www.cve.org/CVERecord?id=CVE-2021-44549", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", url: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", }, ], release_date: "2023-11-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:47:26+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8885", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", }, { cve: "CVE-2024-38808", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, discovery_date: "2024-08-20T08:20:06.895124+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2305959", }, ], notes: [ { category: "description", text: "A flaw was found in the Spring framework package. A maliciously crafted Spring Expression Language (SePL) may trigger uncontrolled CPU usage, leading to a denial of service in the application consuming it. To be considered vulnerable, one application has to evaluate user-supplied SpEL expressions.", title: "Vulnerability description", }, { category: "summary", text: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-38808", }, { category: "external", summary: "RHBZ#2305959", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2305959", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-38808", url: "https://www.cve.org/CVERecord?id=CVE-2024-38808", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", }, { category: "external", summary: "https://spring.io/security/cve-2024-38808", url: "https://spring.io/security/cve-2024-38808", }, ], release_date: "2024-08-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:47:26+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8885", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", }, { cve: "CVE-2024-47803", cwe: { id: "CWE-209", name: "Generation of Error Message Containing Sensitive Information", }, discovery_date: "2024-10-02T16:03:47.127227+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316137", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Exposure of multi-line secrets through error messages", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47803", }, { category: "external", summary: "RHBZ#2316137", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316137", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47803", url: "https://www.cve.org/CVERecord?id=CVE-2024-47803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", }, ], release_date: "2024-10-02T15:35:02.392000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:47:26+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8885", }, { category: "workaround", details: "Mitigation for this issue is ei ther not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Exposure of multi-line secrets through error messages", }, { cve: "CVE-2024-47804", cwe: { id: "CWE-1220", name: "Insufficient Granularity of Access Control", }, discovery_date: "2024-10-02T16:01:28.440675+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316131", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. When attempting to create an item prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API, if either of these checks fail, Jenkins creates the item in memory and only deletes it from disk. This may allow an attacker with the Item/Configure permission to save the item, effectively bypassing the item creation restriction.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Item creation restriction bypass vulnerability", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47804", }, { category: "external", summary: "RHBZ#2316131", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316131", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47804", url: "https://www.cve.org/CVERecord?id=CVE-2024-47804", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", }, ], release_date: "2024-10-02T15:35:03.020000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:47:26+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8885", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Item creation restriction bypass vulnerability", }, ], }
rhsa-2024:7676
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Critical", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update is now available for Red Hat build of Quarkus. \nRed Hat Product Security has rated this update as having a security impact\nof Critical. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability. For\nmore information, see the CVE links in the References section.", title: "Topic", }, { category: "general", text: "This release of Red Hat build of Quarkus 3.2.12.SP1 contains security updates. For more information, see the release notes\npage listed in the References section.\n\nSecurity Fix(es):\n\n* com.google.protobuf/protobuf: StackOverflow vulnerability in Protocol Buffers (CVE-2024-7254)\n\n* org.eclipse.angus/angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication (CVE-2021-44549)\n\n* com.graphql-java.graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java (CVE-2024-40094)\n\n* org.apache.avro/avro: Schema parsing may trigger Remote Code Execution (RCE) (CVE-2024-47561)", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2024:7676", url: "https://access.redhat.com/errata/RHSA-2024:7676", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#critical", url: "https://access.redhat.com/security/updates/classification/#critical", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7676.json", }, ], title: "Red Hat Security Advisory: Red Hat build of Quarkus 3.2.12.SP1 Security Update", tracking: { current_release_date: "2025-02-18T14:27:14+00:00", generator: { date: "2025-02-18T14:27:14+00:00", engine: { name: "Red Hat SDEngine", version: "4.3.1", }, }, id: "RHSA-2024:7676", initial_release_date: "2024-10-10T13:43:59+00:00", revision_history: [ { date: "2024-10-10T13:43:59+00:00", number: "1", summary: "Initial version", }, { date: "2024-10-10T13:43:59+00:00", number: "2", summary: "Last updated version", }, { date: "2025-02-18T14:27:14+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat build of Quarkus 3.2", product: { name: "Red Hat build of Quarkus 3.2", product_id: "Red Hat build of Quarkus 3.2", product_identification_helper: { cpe: "cpe:/a:redhat:quarkus:3.2::el8", }, }, }, ], category: "product_family", name: "Red Hat build of Quarkus", }, ], category: "vendor", name: "Red Hat", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, discovery_date: "2024-10-01T01:34:34.576000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2315808", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Sling Commons Messaging Mail(angus-mail), which provides a simple interface for sending emails via SMTPS in OSGi, does not offer an option to enable server identity checks, leaving connections vulnerable to \"man-in-the-middle\" attacks and can allow insecure email communication.", title: "Vulnerability description", }, { category: "summary", text: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", title: "Vulnerability summary", }, { category: "other", text: "This vulnerability should be considered of important severity rather than moderate because it directly impacts the integrity and confidentiality of email communications over SMTPS. By disabling server identity checks, it leaves the communication channel vulnerable to \"man-in-the-middle\" (MITM) attacks, where an attacker could intercept, alter, or eavesdrop on email traffic by impersonating the legitimate mail server.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "Red Hat build of Quarkus 3.2", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2021-44549", }, { category: "external", summary: "RHBZ#2315808", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2315808", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2021-44549", url: "https://www.cve.org/CVERecord?id=CVE-2021-44549", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", url: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", }, ], release_date: "2023-11-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-10-10T13:43:59+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "Red Hat build of Quarkus 3.2", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:7676", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "Red Hat build of Quarkus 3.2", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, products: [ "Red Hat build of Quarkus 3.2", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", }, { cve: "CVE-2024-7254", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2024-09-19T01:20:29.981665+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2313454", }, ], notes: [ { category: "description", text: "A flaw was found in Protocol Buffers (protobuf). This issue can allows an attacker to cause a StackOverflow via parsing untrusted Protocol Buffers data containing arbitrarily nested SGROUP tags, leading to unbounded recursion.", title: "Vulnerability description", }, { category: "summary", text: "protobuf: StackOverflow vulnerability in Protocol Buffers", title: "Vulnerability summary", }, { category: "other", text: "This issue represents a significant severity risk because unbounded recursion in Protocol Buffers parsing can be exploited to trigger stack overflows, leading to Denial of Service (DoS). When parsers, such as `DiscardUnknownFieldsParser` or the Java Protobuf Lite parser, encounter arbitrarily nested groups or deeply recursive map fields, the lack of recursion depth limits can result in uncontrolled stack growth. Attackers can craft malicious protobuf messages that deliberately exceed the stack's capacity, causing the application to crash or become unresponsive.\n\nThe protobuf package as shipped in RHEL does not include the affected java or kotlin bindings, therefore RHEL is Not Affected.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "Red Hat build of Quarkus 3.2", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-7254", }, { category: "external", summary: "RHBZ#2313454", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2313454", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-7254", url: "https://www.cve.org/CVERecord?id=CVE-2024-7254", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-7254", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-7254", }, { category: "external", summary: "https://github.com/protocolbuffers/protobuf/commit/cc8b3483a5584b3301e3d43d17eb59704857ffaa", url: "https://github.com/protocolbuffers/protobuf/commit/cc8b3483a5584b3301e3d43d17eb59704857ffaa", }, ], release_date: "2024-09-19T01:15:10.963000+00:00", remediations: [ { category: "vendor_fix", date: "2024-10-10T13:43:59+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "Red Hat build of Quarkus 3.2", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:7676", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "Red Hat build of Quarkus 3.2", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "Red Hat build of Quarkus 3.2", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "protobuf: StackOverflow vulnerability in Protocol Buffers", }, { cve: "CVE-2024-40094", cwe: { id: "CWE-770", name: "Allocation of Resources Without Limits or Throttling", }, discovery_date: "2024-07-30T07:20:08+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2301456", }, ], notes: [ { category: "description", text: "A vulnerability was found in GraphQL Java, affecting versions prior to 21.5. This flaw allows an attacker to perform a denial of service (DoS) attack via introspection queries. The issue arises due to the improper handling of ExecutableNormalizedFields (ENFs), which are not adequately considered during the introspection query process. This issue could lead to resource exhaustion and service disruption under certain conditions.", title: "Vulnerability description", }, { category: "summary", text: "graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "Red Hat build of Quarkus 3.2", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-40094", }, { category: "external", summary: "RHBZ#2301456", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2301456", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-40094", url: "https://www.cve.org/CVERecord?id=CVE-2024-40094", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-40094", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-40094", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/commit/97743bc1b5caa2b0bd894dc8e128b47e4d771e4a", url: "https://github.com/graphql-java/graphql-java/commit/97743bc1b5caa2b0bd894dc8e128b47e4d771e4a", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/discussions/3641", url: "https://github.com/graphql-java/graphql-java/discussions/3641", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/pull/3539", url: "https://github.com/graphql-java/graphql-java/pull/3539", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/releases/tag/v19.11", url: "https://github.com/graphql-java/graphql-java/releases/tag/v19.11", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/releases/tag/v20.9", url: "https://github.com/graphql-java/graphql-java/releases/tag/v20.9", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/releases/tag/v21.5", url: "https://github.com/graphql-java/graphql-java/releases/tag/v21.5", }, ], release_date: "2024-07-30T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-10-10T13:43:59+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "Red Hat build of Quarkus 3.2", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:7676", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "Red Hat build of Quarkus 3.2", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java", }, { cve: "CVE-2024-47561", cwe: { id: "CWE-502", name: "Deserialization of Untrusted Data", }, discovery_date: "2024-10-02T14:04:06.018000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316116", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Avro. The project is affected and at risk if it accepts an org.apache.Avro/avroAvro schema for parsing provided by an end user. This flaw allows an attacker to trigger remote code execution by using the special \"java-class\" attribute.", title: "Vulnerability description", }, { category: "summary", text: "apache-avro: Schema parsing may trigger Remote Code Execution (RCE)", title: "Vulnerability summary", }, { category: "other", text: "The Red Hat build of Apache Camel K 1.10 was rated Important as it allows users to provide an Avro schema for parsing. Note that this functionality is limited to authenticated users.\n\nRed Hat Single Sign-On 7 ships the affected component in its maven repository but does not use it in the product. As such it is affected but not vulnerable to the flaw, and is assessed at Moderate security impact.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "Red Hat build of Quarkus 3.2", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47561", }, { category: "external", summary: "RHBZ#2316116", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316116", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47561", url: "https://www.cve.org/CVERecord?id=CVE-2024-47561", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47561", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47561", }, ], release_date: "2024-10-03T12:20:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-10-10T13:43:59+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "Red Hat build of Quarkus 3.2", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:7676", }, { category: "workaround", details: "1. Avoid parsing user-provided schemas.\n2. Ensure proper input validation and sanitization of schemas before parsing.\n3. Monitor systems for any unusual activities that may indicate exploitation attempts.\n4. Apply the principle of least privilege to minimize the potential impact of successful exploits.", product_ids: [ "Red Hat build of Quarkus 3.2", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "Red Hat build of Quarkus 3.2", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "apache-avro: Schema parsing may trigger Remote Code Execution (RCE)", }, ], }
rhsa-2024_8884
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.15.\nRed Hat Product Security has rated this update as having a security impact of important.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating,\nis available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Jenkins is a continuous integration server that monitors executions of repeated\njobs, such as building a software project or jobs run by cron.\n\nSecurity Fixes:\n\n* jenkins: Item creation restriction bypass vulnerability (CVE-2024-47804)\n* jenkins: Exposure of multi-line secrets through error messages (CVE-2024-47803)\n* jenkins: Enabling Secure Server Identity Checks for Safer SMTPS Communication (CVE-2021-44549)\n* jenkins: Denial of service when processing a specially crafted Spring Expression Language expression (CVE-2024-38808)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments,\nand other related information, refer to the CVE page listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2024:8884", url: "https://access.redhat.com/errata/RHSA-2024:8884", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8884.json", }, ], title: "Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 Openshift Jenkins security update", tracking: { current_release_date: "2024-12-04T22:56:49+00:00", generator: { date: "2024-12-04T22:56:49+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.2", }, }, id: "RHSA-2024:8884", initial_release_date: "2024-11-05T11:25:56+00:00", revision_history: [ { date: "2024-11-05T11:25:56+00:00", number: "1", summary: "Initial version", }, { date: "2024-11-05T11:25:56+00:00", number: "2", summary: "Last updated version", }, { date: "2024-12-04T22:56:49+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "OpenShift Developer Tools and Services for OCP 4.15", product: { name: "OpenShift Developer Tools and Services for OCP 4.15", product_id: "8Base-OCP-Tools-4.15", product_identification_helper: { cpe: "cpe:/a:redhat:ocp_tools:4.15::el8", }, }, }, ], category: "product_family", name: "OpenShift Jenkins", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729837947-3.el8.src", product: { name: "jenkins-0:2.462.3.1729837947-3.el8.src", product_id: "jenkins-0:2.462.3.1729837947-3.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729837947-3.el8?arch=src", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.src", product: { name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.src", product_id: "jenkins-2-plugins-0:4.15.1729838165-1.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.15.1729838165-1.el8?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729837947-3.el8.noarch", product: { name: "jenkins-0:2.462.3.1729837947-3.el8.noarch", product_id: "jenkins-0:2.462.3.1729837947-3.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729837947-3.el8?arch=noarch", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", product: { name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", product_id: "jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.15.1729838165-1.el8?arch=noarch", }, }, }, ], category: "architecture", name: "noarch", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729837947-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.15", product_id: "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", }, product_reference: "jenkins-0:2.462.3.1729837947-3.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.15", }, { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729837947-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.15", product_id: "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", }, product_reference: "jenkins-0:2.462.3.1729837947-3.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.15", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.15", product_id: "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", }, product_reference: "jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.15", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.15", product_id: "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", }, product_reference: "jenkins-2-plugins-0:4.15.1729838165-1.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.15", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, discovery_date: "2024-10-01T01:34:34.576000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2315808", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Sling Commons Messaging Mail(angus-mail), which provides a simple interface for sending emails via SMTPS in OSGi, does not offer an option to enable server identity checks, leaving connections vulnerable to \"man-in-the-middle\" attacks and can allow insecure email communication.", title: "Vulnerability description", }, { category: "summary", text: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", title: "Vulnerability summary", }, { category: "other", text: "This vulnerability should be considered of important severity rather than moderate because it directly impacts the integrity and confidentiality of email communications over SMTPS. By disabling server identity checks, it leaves the communication channel vulnerable to \"man-in-the-middle\" (MITM) attacks, where an attacker could intercept, alter, or eavesdrop on email traffic by impersonating the legitimate mail server.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2021-44549", }, { category: "external", summary: "RHBZ#2315808", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2315808", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2021-44549", url: "https://www.cve.org/CVERecord?id=CVE-2021-44549", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", url: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", }, ], release_date: "2023-11-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:25:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8884", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", }, { cve: "CVE-2024-38808", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, discovery_date: "2024-08-20T08:20:06.895124+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2305959", }, ], notes: [ { category: "description", text: "A flaw was found in the Spring framework package. A maliciously crafted Spring Expression Language (SePL) may trigger uncontrolled CPU usage, leading to a denial of service in the application consuming it. To be considered vulnerable, one application has to evaluate user-supplied SpEL expressions.", title: "Vulnerability description", }, { category: "summary", text: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-38808", }, { category: "external", summary: "RHBZ#2305959", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2305959", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-38808", url: "https://www.cve.org/CVERecord?id=CVE-2024-38808", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", }, { category: "external", summary: "https://spring.io/security/cve-2024-38808", url: "https://spring.io/security/cve-2024-38808", }, ], release_date: "2024-08-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:25:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8884", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", }, { cve: "CVE-2024-47803", cwe: { id: "CWE-209", name: "Generation of Error Message Containing Sensitive Information", }, discovery_date: "2024-10-02T16:03:47.127227+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316137", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Exposure of multi-line secrets through error messages", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47803", }, { category: "external", summary: "RHBZ#2316137", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316137", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47803", url: "https://www.cve.org/CVERecord?id=CVE-2024-47803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", }, ], release_date: "2024-10-02T15:35:02.392000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:25:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8884", }, { category: "workaround", details: "Mitigation for this issue is ei ther not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Exposure of multi-line secrets through error messages", }, { cve: "CVE-2024-47804", cwe: { id: "CWE-1220", name: "Insufficient Granularity of Access Control", }, discovery_date: "2024-10-02T16:01:28.440675+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316131", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. When attempting to create an item prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API, if either of these checks fail, Jenkins creates the item in memory and only deletes it from disk. This may allow an attacker with the Item/Configure permission to save the item, effectively bypassing the item creation restriction.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Item creation restriction bypass vulnerability", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47804", }, { category: "external", summary: "RHBZ#2316131", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316131", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47804", url: "https://www.cve.org/CVERecord?id=CVE-2024-47804", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", }, ], release_date: "2024-10-02T15:35:03.020000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:25:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8884", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Item creation restriction bypass vulnerability", }, ], }
rhsa-2024:8886
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.12.\nRed Hat Product Security has rated this update as having a security impact of important.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating,\nis available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Jenkins is a continuous integration server that monitors executions of repeated\njobs, such as building a software project or jobs run by cron.\n\nSecurity Fix(es):\n\n* jenkins: Exposure of multi-line secrets through error messages (CVE-2024-47803)\n* jenkins: Item creation restriction bypass vulnerability (CVE-2024-47804)\n* jenkins: Enabling Secure Server Identity Checks for Safer SMTPS Communication (CVE-2021-44549)\n* jenkins: Denial of service when processing a specially crafted Spring Expression Language expression (CVE-2024-38808)\n* jenkins-2-plugins: jenkins-plugin/script-security: sandbox bypass via crafted constructor bodies (CVE-2024-34144)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments,\nand other related information, refer to the CVE page listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2024:8886", url: "https://access.redhat.com/errata/RHSA-2024:8886", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8886.json", }, ], title: "Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update", tracking: { current_release_date: "2025-01-30T06:26:50+00:00", generator: { date: "2025-01-30T06:26:50+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2024:8886", initial_release_date: "2024-11-05T12:07:46+00:00", revision_history: [ { date: "2024-11-05T12:07:46+00:00", number: "1", summary: "Initial version", }, { date: "2024-11-05T12:07:46+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-30T06:26:50+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "OpenShift Developer Tools and Services for OCP 4.12", product: { name: "OpenShift Developer Tools and Services for OCP 4.12", product_id: "8Base-OCP-Tools-4.12", product_identification_helper: { cpe: "cpe:/a:redhat:ocp_tools:4.12::el8", }, }, }, ], category: "product_family", name: "OpenShift Jenkins", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1730119132-3.el8.src", product: { name: "jenkins-0:2.462.3.1730119132-3.el8.src", product_id: "jenkins-0:2.462.3.1730119132-3.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1730119132-3.el8?arch=src", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.src", product: { name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.src", product_id: "jenkins-2-plugins-0:4.12.1730119231-1.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.12.1730119231-1.el8?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1730119132-3.el8.noarch", product: { name: "jenkins-0:2.462.3.1730119132-3.el8.noarch", product_id: "jenkins-0:2.462.3.1730119132-3.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1730119132-3.el8?arch=noarch", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", product: { name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", product_id: "jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.12.1730119231-1.el8?arch=noarch", }, }, }, ], category: "architecture", name: "noarch", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1730119132-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.12", product_id: "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", }, product_reference: "jenkins-0:2.462.3.1730119132-3.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.12", }, { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1730119132-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.12", product_id: "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", }, product_reference: "jenkins-0:2.462.3.1730119132-3.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.12", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.12", product_id: "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", }, product_reference: "jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.12", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.12.1730119231-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.12", product_id: "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", }, product_reference: "jenkins-2-plugins-0:4.12.1730119231-1.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.12", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, discovery_date: "2024-10-01T01:34:34.576000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2315808", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Sling Commons Messaging Mail(angus-mail), which provides a simple interface for sending emails via SMTPS in OSGi, does not offer an option to enable server identity checks, leaving connections vulnerable to \"man-in-the-middle\" attacks and can allow insecure email communication.", title: "Vulnerability description", }, { category: "summary", text: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", title: "Vulnerability summary", }, { category: "other", text: "This vulnerability should be considered of important severity rather than moderate because it directly impacts the integrity and confidentiality of email communications over SMTPS. By disabling server identity checks, it leaves the communication channel vulnerable to \"man-in-the-middle\" (MITM) attacks, where an attacker could intercept, alter, or eavesdrop on email traffic by impersonating the legitimate mail server.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2021-44549", }, { category: "external", summary: "RHBZ#2315808", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2315808", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2021-44549", url: "https://www.cve.org/CVERecord?id=CVE-2021-44549", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", url: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", }, ], release_date: "2023-11-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:07:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8886", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", }, { cve: "CVE-2024-34144", cwe: { id: "CWE-693", name: "Protection Mechanism Failure", }, discovery_date: "2024-05-03T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2278820", }, ], notes: [ { category: "description", text: "A sandbox bypass vulnerability was found in the Jenkins Script Security Plugin involving crafted constructor bodies, enabling the circumvention of security restrictions. With crafted constructor bodies, this flaw allows authenticated attackers to define and execute sandboxed scripts, including Pipelines, bypassing sandbox protection mechanisms and executing arbitrary code within the context of the Jenkins controller JVM.\r\n\r\nThe Script Security Plugin features a sandbox functionality designed to enable users with limited privileges to create scripts, including Pipelines, which are generally safe for execution. This security mechanism intercepts calls within sandboxed scripts, referencing various allowlists to decide whether these calls should be permitted.\r\n\r\nThe vulnerabilities that allow for sandbox bypass have been identified in versions up to 1335.vf07d9ce377a_e of the Script Security Plugin. These vulnerabilities include:\r\n\r\n- Exploiting crafted constructor bodies that trigger other constructors, thereby allowing the construction of any subclassable type through implicit casts.\r\n- Utilizing Groovy classes defined within the sandbox that overshadow certain non-sandboxed classes, facilitating the creation of any subclassable type.\r\n\r\nThese vulnerabilities enable attackers, who have the permission to create and execute sandboxed scripts including Pipelines, to circumvent sandbox protections and execute arbitrary code within the context of the Jenkins controller JVM.\r\n\r\nThe fixed version of this script incorporates enhanced restrictions and sanity checks. These improvements ensure that calls to super constructors are intercepted by the sandbox, including:\r\n\r\n- Ensuring that calls to other constructors via 'this' are now appropriately managed within the sandbox.\r\n- No longer overlooking classes in packages that may be overshadowed by Groovy-defined classes when intercepting super constructor calls.", title: "Vulnerability description", }, { category: "summary", text: "jenkins-plugin/script-security: sandbox bypass via crafted constructor bodies", title: "Vulnerability summary", }, { category: "other", text: "Red Hat rates the security impact of this vulnerability as Important due to the worst case scenario resulting in a process being able to access resources outside an assigned sandbox.\n\nThe vulnerabilities that allow for sandbox bypass have been identified in versions up to 1335.vf07d9ce377a_e of the Script Security Plugin. These vulnerabilities include exploiting specially crafted constructor bodies, utilizing certain groovy classes.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-34144", }, { category: "external", summary: "RHBZ#2278820", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2278820", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-34144", url: "https://www.cve.org/CVERecord?id=CVE-2024-34144", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-34144", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-34144", }, { category: "external", summary: "http://www.openwall.com/lists/oss-security/2024/05/02/3", url: "http://www.openwall.com/lists/oss-security/2024/05/02/3", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341", url: "https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341", }, ], release_date: "2024-05-02T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:07:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8886", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "jenkins-plugin/script-security: sandbox bypass via crafted constructor bodies", }, { cve: "CVE-2024-38808", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, discovery_date: "2024-08-20T08:20:06.895124+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2305959", }, ], notes: [ { category: "description", text: "A flaw was found in the Spring framework package. A maliciously crafted Spring Expression Language (SePL) may trigger uncontrolled CPU usage, leading to a denial of service in the application consuming it. To be considered vulnerable, one application has to evaluate user-supplied SpEL expressions.", title: "Vulnerability description", }, { category: "summary", text: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-38808", }, { category: "external", summary: "RHBZ#2305959", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2305959", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-38808", url: "https://www.cve.org/CVERecord?id=CVE-2024-38808", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", }, { category: "external", summary: "https://spring.io/security/cve-2024-38808", url: "https://spring.io/security/cve-2024-38808", }, ], release_date: "2024-08-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:07:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8886", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", }, { cve: "CVE-2024-47803", cwe: { id: "CWE-209", name: "Generation of Error Message Containing Sensitive Information", }, discovery_date: "2024-10-02T16:03:47.127227+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316137", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Exposure of multi-line secrets through error messages", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47803", }, { category: "external", summary: "RHBZ#2316137", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316137", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47803", url: "https://www.cve.org/CVERecord?id=CVE-2024-47803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", }, ], release_date: "2024-10-02T15:35:02.392000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:07:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8886", }, { category: "workaround", details: "Mitigation for this issue is ei ther not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Exposure of multi-line secrets through error messages", }, { cve: "CVE-2024-47804", cwe: { id: "CWE-1220", name: "Insufficient Granularity of Access Control", }, discovery_date: "2024-10-02T16:01:28.440675+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316131", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. When attempting to create an item prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API, if either of these checks fail, Jenkins creates the item in memory and only deletes it from disk. This may allow an attacker with the Item/Configure permission to save the item, effectively bypassing the item creation restriction.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Item creation restriction bypass vulnerability", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47804", }, { category: "external", summary: "RHBZ#2316131", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316131", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47804", url: "https://www.cve.org/CVERecord?id=CVE-2024-47804", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", }, ], release_date: "2024-10-02T15:35:03.020000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:07:46+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8886", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-0:2.462.3.1730119132-3.el8.src", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.noarch", "8Base-OCP-Tools-4.12:jenkins-2-plugins-0:4.12.1730119231-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Item creation restriction bypass vulnerability", }, ], }
rhsa-2024_7676
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Critical", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update is now available for Red Hat build of Quarkus. \nRed Hat Product Security has rated this update as having a security impact\nof Critical. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability. For\nmore information, see the CVE links in the References section.", title: "Topic", }, { category: "general", text: "This release of Red Hat build of Quarkus 3.2.12.SP1 contains security updates. For more information, see the release notes\npage listed in the References section.\n\nSecurity Fix(es):\n\n* com.google.protobuf/protobuf: StackOverflow vulnerability in Protocol Buffers (CVE-2024-7254)\n\n* org.eclipse.angus/angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication (CVE-2021-44549)\n\n* com.graphql-java.graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java (CVE-2024-40094)\n\n* org.apache.avro/avro: Schema parsing may trigger Remote Code Execution (RCE) (CVE-2024-47561)", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2024:7676", url: "https://access.redhat.com/errata/RHSA-2024:7676", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#critical", url: "https://access.redhat.com/security/updates/classification/#critical", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7676.json", }, ], title: "Red Hat Security Advisory: Red Hat build of Quarkus 3.2.12.SP1 Security Update", tracking: { current_release_date: "2024-12-06T13:14:07+00:00", generator: { date: "2024-12-06T13:14:07+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.2", }, }, id: "RHSA-2024:7676", initial_release_date: "2024-10-10T13:43:59+00:00", revision_history: [ { date: "2024-10-10T13:43:59+00:00", number: "1", summary: "Initial version", }, { date: "2024-10-10T13:43:59+00:00", number: "2", summary: "Last updated version", }, { date: "2024-12-06T13:14:07+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat build of Quarkus 3.2", product: { name: "Red Hat build of Quarkus 3.2", product_id: "Red Hat build of Quarkus 3.2", product_identification_helper: { cpe: "cpe:/a:redhat:quarkus:3.2::el8", }, }, }, ], category: "product_family", name: "Red Hat build of Quarkus", }, ], category: "vendor", name: "Red Hat", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, discovery_date: "2024-10-01T01:34:34.576000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2315808", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Sling Commons Messaging Mail(angus-mail), which provides a simple interface for sending emails via SMTPS in OSGi, does not offer an option to enable server identity checks, leaving connections vulnerable to \"man-in-the-middle\" attacks and can allow insecure email communication.", title: "Vulnerability description", }, { category: "summary", text: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", title: "Vulnerability summary", }, { category: "other", text: "This vulnerability should be considered of important severity rather than moderate because it directly impacts the integrity and confidentiality of email communications over SMTPS. By disabling server identity checks, it leaves the communication channel vulnerable to \"man-in-the-middle\" (MITM) attacks, where an attacker could intercept, alter, or eavesdrop on email traffic by impersonating the legitimate mail server.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "Red Hat build of Quarkus 3.2", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2021-44549", }, { category: "external", summary: "RHBZ#2315808", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2315808", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2021-44549", url: "https://www.cve.org/CVERecord?id=CVE-2021-44549", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", url: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", }, ], release_date: "2023-11-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-10-10T13:43:59+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "Red Hat build of Quarkus 3.2", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:7676", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "Red Hat build of Quarkus 3.2", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, products: [ "Red Hat build of Quarkus 3.2", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", }, { cve: "CVE-2024-7254", cwe: { id: "CWE-20", name: "Improper Input Validation", }, discovery_date: "2024-09-19T01:20:29.981665+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2313454", }, ], notes: [ { category: "description", text: "A flaw was found in Protocol Buffers (protobuf). This issue can allows an attacker to cause a StackOverflow via parsing untrusted Protocol Buffers data containing arbitrarily nested SGROUP tags, leading to unbounded recursion.", title: "Vulnerability description", }, { category: "summary", text: "protobuf: StackOverflow vulnerability in Protocol Buffers", title: "Vulnerability summary", }, { category: "other", text: "This issue represents a significant severity risk because unbounded recursion in Protocol Buffers parsing can be exploited to trigger stack overflows, leading to Denial of Service (DoS). When parsers, such as `DiscardUnknownFieldsParser` or the Java Protobuf Lite parser, encounter arbitrarily nested groups or deeply recursive map fields, the lack of recursion depth limits can result in uncontrolled stack growth. Attackers can craft malicious protobuf messages that deliberately exceed the stack's capacity, causing the application to crash or become unresponsive.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "Red Hat build of Quarkus 3.2", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-7254", }, { category: "external", summary: "RHBZ#2313454", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2313454", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-7254", url: "https://www.cve.org/CVERecord?id=CVE-2024-7254", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-7254", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-7254", }, { category: "external", summary: "https://github.com/protocolbuffers/protobuf/commit/cc8b3483a5584b3301e3d43d17eb59704857ffaa", url: "https://github.com/protocolbuffers/protobuf/commit/cc8b3483a5584b3301e3d43d17eb59704857ffaa", }, ], release_date: "2024-09-19T01:15:10.963000+00:00", remediations: [ { category: "vendor_fix", date: "2024-10-10T13:43:59+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "Red Hat build of Quarkus 3.2", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:7676", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "Red Hat build of Quarkus 3.2", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "Red Hat build of Quarkus 3.2", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "protobuf: StackOverflow vulnerability in Protocol Buffers", }, { cve: "CVE-2024-40094", cwe: { id: "CWE-770", name: "Allocation of Resources Without Limits or Throttling", }, discovery_date: "2024-07-30T07:20:08+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2301456", }, ], notes: [ { category: "description", text: "A vulnerability was found in GraphQL Java, affecting versions prior to 21.5. This flaw allows an attacker to perform a denial of service (DoS) attack via introspection queries. The issue arises due to the improper handling of ExecutableNormalizedFields (ENFs), which are not adequately considered during the introspection query process. This issue could lead to resource exhaustion and service disruption under certain conditions.", title: "Vulnerability description", }, { category: "summary", text: "graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "Red Hat build of Quarkus 3.2", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-40094", }, { category: "external", summary: "RHBZ#2301456", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2301456", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-40094", url: "https://www.cve.org/CVERecord?id=CVE-2024-40094", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-40094", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-40094", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/commit/97743bc1b5caa2b0bd894dc8e128b47e4d771e4a", url: "https://github.com/graphql-java/graphql-java/commit/97743bc1b5caa2b0bd894dc8e128b47e4d771e4a", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/discussions/3641", url: "https://github.com/graphql-java/graphql-java/discussions/3641", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/pull/3539", url: "https://github.com/graphql-java/graphql-java/pull/3539", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/releases/tag/v19.11", url: "https://github.com/graphql-java/graphql-java/releases/tag/v19.11", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/releases/tag/v20.9", url: "https://github.com/graphql-java/graphql-java/releases/tag/v20.9", }, { category: "external", summary: "https://github.com/graphql-java/graphql-java/releases/tag/v21.5", url: "https://github.com/graphql-java/graphql-java/releases/tag/v21.5", }, ], release_date: "2024-07-30T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-10-10T13:43:59+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "Red Hat build of Quarkus 3.2", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:7676", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "Red Hat build of Quarkus 3.2", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java", }, { cve: "CVE-2024-47561", cwe: { id: "CWE-502", name: "Deserialization of Untrusted Data", }, discovery_date: "2024-10-02T14:04:06.018000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316116", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Avro. The project is affected and at risk if it accepts an org.apache.Avro/avroAvro schema for parsing provided by an end user. This flaw allows an attacker to trigger remote code execution by using the special \"java-class\" attribute.", title: "Vulnerability description", }, { category: "summary", text: "apache-avro: Schema parsing may trigger Remote Code Execution (RCE)", title: "Vulnerability summary", }, { category: "other", text: "The Red Hat build of Apache Camel K 1.10 was rated Important as it allows users to provide an Avro schema for parsing. Note that this functionality is limited to authenticated users.\n\nRed Hat Single Sign-On 7 ships the affected component in its maven repository but does not use it in the product. As such it is affected but not vulnerable to the flaw, and is assessed at Moderate security impact.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "Red Hat build of Quarkus 3.2", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47561", }, { category: "external", summary: "RHBZ#2316116", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316116", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47561", url: "https://www.cve.org/CVERecord?id=CVE-2024-47561", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47561", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47561", }, ], release_date: "2024-10-03T12:20:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-10-10T13:43:59+00:00", details: "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "Red Hat build of Quarkus 3.2", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:7676", }, { category: "workaround", details: "1. Avoid parsing user-provided schemas.\n2. Ensure proper input validation and sanitization of schemas before parsing.\n3. Monitor systems for any unusual activities that may indicate exploitation attempts.\n4. Apply the principle of least privilege to minimize the potential impact of successful exploits.", product_ids: [ "Red Hat build of Quarkus 3.2", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "Red Hat build of Quarkus 3.2", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "apache-avro: Schema parsing may trigger Remote Code Execution (RCE)", }, ], }
rhsa-2024:8884
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.15.\nRed Hat Product Security has rated this update as having a security impact of important.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating,\nis available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Jenkins is a continuous integration server that monitors executions of repeated\njobs, such as building a software project or jobs run by cron.\n\nSecurity Fixes:\n\n* jenkins: Item creation restriction bypass vulnerability (CVE-2024-47804)\n* jenkins: Exposure of multi-line secrets through error messages (CVE-2024-47803)\n* jenkins: Enabling Secure Server Identity Checks for Safer SMTPS Communication (CVE-2021-44549)\n* jenkins: Denial of service when processing a specially crafted Spring Expression Language expression (CVE-2024-38808)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments,\nand other related information, refer to the CVE page listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2024:8884", url: "https://access.redhat.com/errata/RHSA-2024:8884", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8884.json", }, ], title: "Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 Openshift Jenkins security update", tracking: { current_release_date: "2025-01-30T06:26:13+00:00", generator: { date: "2025-01-30T06:26:13+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2024:8884", initial_release_date: "2024-11-05T11:25:56+00:00", revision_history: [ { date: "2024-11-05T11:25:56+00:00", number: "1", summary: "Initial version", }, { date: "2024-11-05T11:25:56+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-30T06:26:13+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "OpenShift Developer Tools and Services for OCP 4.15", product: { name: "OpenShift Developer Tools and Services for OCP 4.15", product_id: "8Base-OCP-Tools-4.15", product_identification_helper: { cpe: "cpe:/a:redhat:ocp_tools:4.15::el8", }, }, }, ], category: "product_family", name: "OpenShift Jenkins", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729837947-3.el8.src", product: { name: "jenkins-0:2.462.3.1729837947-3.el8.src", product_id: "jenkins-0:2.462.3.1729837947-3.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729837947-3.el8?arch=src", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.src", product: { name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.src", product_id: "jenkins-2-plugins-0:4.15.1729838165-1.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.15.1729838165-1.el8?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729837947-3.el8.noarch", product: { name: "jenkins-0:2.462.3.1729837947-3.el8.noarch", product_id: "jenkins-0:2.462.3.1729837947-3.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729837947-3.el8?arch=noarch", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", product: { name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", product_id: "jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.15.1729838165-1.el8?arch=noarch", }, }, }, ], category: "architecture", name: "noarch", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729837947-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.15", product_id: "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", }, product_reference: "jenkins-0:2.462.3.1729837947-3.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.15", }, { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729837947-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.15", product_id: "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", }, product_reference: "jenkins-0:2.462.3.1729837947-3.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.15", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.15", product_id: "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", }, product_reference: "jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.15", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.15.1729838165-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.15", product_id: "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", }, product_reference: "jenkins-2-plugins-0:4.15.1729838165-1.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.15", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, discovery_date: "2024-10-01T01:34:34.576000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2315808", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Sling Commons Messaging Mail(angus-mail), which provides a simple interface for sending emails via SMTPS in OSGi, does not offer an option to enable server identity checks, leaving connections vulnerable to \"man-in-the-middle\" attacks and can allow insecure email communication.", title: "Vulnerability description", }, { category: "summary", text: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", title: "Vulnerability summary", }, { category: "other", text: "This vulnerability should be considered of important severity rather than moderate because it directly impacts the integrity and confidentiality of email communications over SMTPS. By disabling server identity checks, it leaves the communication channel vulnerable to \"man-in-the-middle\" (MITM) attacks, where an attacker could intercept, alter, or eavesdrop on email traffic by impersonating the legitimate mail server.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2021-44549", }, { category: "external", summary: "RHBZ#2315808", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2315808", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2021-44549", url: "https://www.cve.org/CVERecord?id=CVE-2021-44549", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", url: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", }, ], release_date: "2023-11-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:25:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8884", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", }, { cve: "CVE-2024-38808", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, discovery_date: "2024-08-20T08:20:06.895124+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2305959", }, ], notes: [ { category: "description", text: "A flaw was found in the Spring framework package. A maliciously crafted Spring Expression Language (SePL) may trigger uncontrolled CPU usage, leading to a denial of service in the application consuming it. To be considered vulnerable, one application has to evaluate user-supplied SpEL expressions.", title: "Vulnerability description", }, { category: "summary", text: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-38808", }, { category: "external", summary: "RHBZ#2305959", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2305959", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-38808", url: "https://www.cve.org/CVERecord?id=CVE-2024-38808", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", }, { category: "external", summary: "https://spring.io/security/cve-2024-38808", url: "https://spring.io/security/cve-2024-38808", }, ], release_date: "2024-08-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:25:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8884", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", }, { cve: "CVE-2024-47803", cwe: { id: "CWE-209", name: "Generation of Error Message Containing Sensitive Information", }, discovery_date: "2024-10-02T16:03:47.127227+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316137", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Exposure of multi-line secrets through error messages", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47803", }, { category: "external", summary: "RHBZ#2316137", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316137", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47803", url: "https://www.cve.org/CVERecord?id=CVE-2024-47803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", }, ], release_date: "2024-10-02T15:35:02.392000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:25:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8884", }, { category: "workaround", details: "Mitigation for this issue is ei ther not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Exposure of multi-line secrets through error messages", }, { cve: "CVE-2024-47804", cwe: { id: "CWE-1220", name: "Insufficient Granularity of Access Control", }, discovery_date: "2024-10-02T16:01:28.440675+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316131", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. When attempting to create an item prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API, if either of these checks fail, Jenkins creates the item in memory and only deletes it from disk. This may allow an attacker with the Item/Configure permission to save the item, effectively bypassing the item creation restriction.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Item creation restriction bypass vulnerability", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47804", }, { category: "external", summary: "RHBZ#2316131", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316131", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47804", url: "https://www.cve.org/CVERecord?id=CVE-2024-47804", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", }, ], release_date: "2024-10-02T15:35:03.020000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:25:56+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8884", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-0:2.462.3.1729837947-3.el8.src", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.noarch", "8Base-OCP-Tools-4.15:jenkins-2-plugins-0:4.15.1729838165-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Item creation restriction bypass vulnerability", }, ], }
RHSA-2024:8885
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.14.\nRed Hat Product Security has rated this update as having a security impact of important.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating,\nis available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Jenkins is a continuous integration server that monitors executions of repeated\njobs, such as building a software project or jobs run by cron.\n\nSecurity Fixes:\n\n* jenkins: Item creation restriction bypass vulnerability (CVE-2024-47804)\n* jenkins: Exposure of multi-line secrets through error messages\n(CVE-2024-47803)\n* jenkins: Enabling Secure Server Identity Checks for Safer SMTPS Communication (CVE-2021-44549)\n* jenkins: Denial of service when processing a specially crafted Spring Expression Language expression (CVE-2024-38808)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments,\nand other related information, refer to the CVE page listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2024:8885", url: "https://access.redhat.com/errata/RHSA-2024:8885", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8885.json", }, ], title: "Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update", tracking: { current_release_date: "2025-01-30T06:26:26+00:00", generator: { date: "2025-01-30T06:26:26+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.6", }, }, id: "RHSA-2024:8885", initial_release_date: "2024-11-05T11:47:26+00:00", revision_history: [ { date: "2024-11-05T11:47:26+00:00", number: "1", summary: "Initial version", }, { date: "2024-11-05T11:47:26+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-30T06:26:26+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "OpenShift Developer Tools and Services for OCP 4.14", product: { name: "OpenShift Developer Tools and Services for OCP 4.14", product_id: "8Base-OCP-Tools-4.14", product_identification_helper: { cpe: "cpe:/a:redhat:ocp_tools:4.14::el8", }, }, }, ], category: "product_family", name: "OpenShift Jenkins", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729839727-3.el8.src", product: { name: "jenkins-0:2.462.3.1729839727-3.el8.src", product_id: "jenkins-0:2.462.3.1729839727-3.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729839727-3.el8?arch=src", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.src", product: { name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.src", product_id: "jenkins-2-plugins-0:4.14.1729839844-1.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.14.1729839844-1.el8?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729839727-3.el8.noarch", product: { name: "jenkins-0:2.462.3.1729839727-3.el8.noarch", product_id: "jenkins-0:2.462.3.1729839727-3.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729839727-3.el8?arch=noarch", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", product: { name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", product_id: "jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.14.1729839844-1.el8?arch=noarch", }, }, }, ], category: "architecture", name: "noarch", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729839727-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.14", product_id: "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", }, product_reference: "jenkins-0:2.462.3.1729839727-3.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.14", }, { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729839727-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.14", product_id: "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", }, product_reference: "jenkins-0:2.462.3.1729839727-3.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.14", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.14", product_id: "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", }, product_reference: "jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.14", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.14.1729839844-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.14", product_id: "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", }, product_reference: "jenkins-2-plugins-0:4.14.1729839844-1.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.14", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, discovery_date: "2024-10-01T01:34:34.576000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2315808", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Sling Commons Messaging Mail(angus-mail), which provides a simple interface for sending emails via SMTPS in OSGi, does not offer an option to enable server identity checks, leaving connections vulnerable to \"man-in-the-middle\" attacks and can allow insecure email communication.", title: "Vulnerability description", }, { category: "summary", text: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", title: "Vulnerability summary", }, { category: "other", text: "This vulnerability should be considered of important severity rather than moderate because it directly impacts the integrity and confidentiality of email communications over SMTPS. By disabling server identity checks, it leaves the communication channel vulnerable to \"man-in-the-middle\" (MITM) attacks, where an attacker could intercept, alter, or eavesdrop on email traffic by impersonating the legitimate mail server.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2021-44549", }, { category: "external", summary: "RHBZ#2315808", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2315808", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2021-44549", url: "https://www.cve.org/CVERecord?id=CVE-2021-44549", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", url: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", }, ], release_date: "2023-11-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:47:26+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8885", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", }, { cve: "CVE-2024-38808", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, discovery_date: "2024-08-20T08:20:06.895124+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2305959", }, ], notes: [ { category: "description", text: "A flaw was found in the Spring framework package. A maliciously crafted Spring Expression Language (SePL) may trigger uncontrolled CPU usage, leading to a denial of service in the application consuming it. To be considered vulnerable, one application has to evaluate user-supplied SpEL expressions.", title: "Vulnerability description", }, { category: "summary", text: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-38808", }, { category: "external", summary: "RHBZ#2305959", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2305959", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-38808", url: "https://www.cve.org/CVERecord?id=CVE-2024-38808", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", }, { category: "external", summary: "https://spring.io/security/cve-2024-38808", url: "https://spring.io/security/cve-2024-38808", }, ], release_date: "2024-08-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:47:26+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8885", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", }, { cve: "CVE-2024-47803", cwe: { id: "CWE-209", name: "Generation of Error Message Containing Sensitive Information", }, discovery_date: "2024-10-02T16:03:47.127227+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316137", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Exposure of multi-line secrets through error messages", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47803", }, { category: "external", summary: "RHBZ#2316137", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316137", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47803", url: "https://www.cve.org/CVERecord?id=CVE-2024-47803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", }, ], release_date: "2024-10-02T15:35:02.392000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:47:26+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8885", }, { category: "workaround", details: "Mitigation for this issue is ei ther not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Exposure of multi-line secrets through error messages", }, { cve: "CVE-2024-47804", cwe: { id: "CWE-1220", name: "Insufficient Granularity of Access Control", }, discovery_date: "2024-10-02T16:01:28.440675+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316131", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. When attempting to create an item prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API, if either of these checks fail, Jenkins creates the item in memory and only deletes it from disk. This may allow an attacker with the Item/Configure permission to save the item, effectively bypassing the item creation restriction.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Item creation restriction bypass vulnerability", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47804", }, { category: "external", summary: "RHBZ#2316131", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316131", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47804", url: "https://www.cve.org/CVERecord?id=CVE-2024-47804", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", }, ], release_date: "2024-10-02T15:35:03.020000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T11:47:26+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8885", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-0:2.462.3.1729839727-3.el8.src", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.noarch", "8Base-OCP-Tools-4.14:jenkins-2-plugins-0:4.14.1729839844-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Item creation restriction bypass vulnerability", }, ], }
rhsa-2024_8887
Vulnerability from csaf_redhat
Notes
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.13.\nRed Hat Product Security has rated this update as having a security impact of important.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating,\nis available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Jenkins is a continuous integration server that monitors executions of repeated\njobs, such as building a software project or jobs run by cron.\n\nSecurity Fix(es):\n\n* jenkins: Item creation restriction bypass vulnerability (CVE-2024-47804)\n* jenkins: Exposure of multi-line secrets through error messages\n(CVE-2024-47803)\n* jenkins: Enabling Secure Server Identity Checks for Safer SMTPS Communication\n(CVE-2021-44549)\n* jenkins: Denial of service when processing a specially crafted Spring Expression Language expression (CVE-2024-38808)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments,\nand other related information, refer to the CVE page listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2024:8887", url: "https://access.redhat.com/errata/RHSA-2024:8887", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8887.json", }, ], title: "Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 Openshift Jenkins security update", tracking: { current_release_date: "2024-12-04T22:57:09+00:00", generator: { date: "2024-12-04T22:57:09+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.2", }, }, id: "RHSA-2024:8887", initial_release_date: "2024-11-05T12:08:31+00:00", revision_history: [ { date: "2024-11-05T12:08:31+00:00", number: "1", summary: "Initial version", }, { date: "2024-11-05T12:08:31+00:00", number: "2", summary: "Last updated version", }, { date: "2024-12-04T22:57:09+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "OpenShift Developer Tools and Services for OCP 4.13", product: { name: "OpenShift Developer Tools and Services for OCP 4.13", product_id: "8Base-OCP-Tools-4.13", product_identification_helper: { cpe: "cpe:/a:redhat:ocp_tools:4.13::el8", }, }, }, ], category: "product_family", name: "OpenShift Jenkins", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729839924-3.el8.src", product: { name: "jenkins-0:2.462.3.1729839924-3.el8.src", product_id: "jenkins-0:2.462.3.1729839924-3.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729839924-3.el8?arch=src", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.src", product: { name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.src", product_id: "jenkins-2-plugins-0:4.13.1729840148-1.el8.src", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.13.1729840148-1.el8?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "jenkins-0:2.462.3.1729839924-3.el8.noarch", product: { name: "jenkins-0:2.462.3.1729839924-3.el8.noarch", product_id: "jenkins-0:2.462.3.1729839924-3.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins@2.462.3.1729839924-3.el8?arch=noarch", }, }, }, { category: "product_version", name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", product: { name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", product_id: "jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", product_identification_helper: { purl: "pkg:rpm/redhat/jenkins-2-plugins@4.13.1729840148-1.el8?arch=noarch", }, }, }, ], category: "architecture", name: "noarch", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729839924-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.13", product_id: "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", }, product_reference: "jenkins-0:2.462.3.1729839924-3.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.13", }, { category: "default_component_of", full_product_name: { name: "jenkins-0:2.462.3.1729839924-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.13", product_id: "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", }, product_reference: "jenkins-0:2.462.3.1729839924-3.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.13", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.13", product_id: "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", }, product_reference: "jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", relates_to_product_reference: "8Base-OCP-Tools-4.13", }, { category: "default_component_of", full_product_name: { name: "jenkins-2-plugins-0:4.13.1729840148-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.13", product_id: "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", }, product_reference: "jenkins-2-plugins-0:4.13.1729840148-1.el8.src", relates_to_product_reference: "8Base-OCP-Tools-4.13", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, discovery_date: "2024-10-01T01:34:34.576000+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2315808", }, ], notes: [ { category: "description", text: "A vulnerability was found in Apache Sling Commons Messaging Mail(angus-mail), which provides a simple interface for sending emails via SMTPS in OSGi, does not offer an option to enable server identity checks, leaving connections vulnerable to \"man-in-the-middle\" attacks and can allow insecure email communication.", title: "Vulnerability description", }, { category: "summary", text: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", title: "Vulnerability summary", }, { category: "other", text: "This vulnerability should be considered of important severity rather than moderate because it directly impacts the integrity and confidentiality of email communications over SMTPS. By disabling server identity checks, it leaves the communication channel vulnerable to \"man-in-the-middle\" (MITM) attacks, where an attacker could intercept, alter, or eavesdrop on email traffic by impersonating the legitimate mail server.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2021-44549", }, { category: "external", summary: "RHBZ#2315808", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2315808", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2021-44549", url: "https://www.cve.org/CVERecord?id=CVE-2021-44549", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", url: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", }, ], release_date: "2023-11-06T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:08:31+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8887", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication", }, { cve: "CVE-2024-38808", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, discovery_date: "2024-08-20T08:20:06.895124+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2305959", }, ], notes: [ { category: "description", text: "A flaw was found in the Spring framework package. A maliciously crafted Spring Expression Language (SePL) may trigger uncontrolled CPU usage, leading to a denial of service in the application consuming it. To be considered vulnerable, one application has to evaluate user-supplied SpEL expressions.", title: "Vulnerability description", }, { category: "summary", text: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-38808", }, { category: "external", summary: "RHBZ#2305959", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2305959", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-38808", url: "https://www.cve.org/CVERecord?id=CVE-2024-38808", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-38808", }, { category: "external", summary: "https://spring.io/security/cve-2024-38808", url: "https://spring.io/security/cve-2024-38808", }, ], release_date: "2024-08-20T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:08:31+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8887", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression", }, { cve: "CVE-2024-47803", cwe: { id: "CWE-209", name: "Generation of Error Message Containing Sensitive Information", }, discovery_date: "2024-10-02T16:03:47.127227+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316137", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Exposure of multi-line secrets through error messages", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47803", }, { category: "external", summary: "RHBZ#2316137", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316137", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47803", url: "https://www.cve.org/CVERecord?id=CVE-2024-47803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47803", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451", }, ], release_date: "2024-10-02T15:35:02.392000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:08:31+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8887", }, { category: "workaround", details: "Mitigation for this issue is ei ther not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Exposure of multi-line secrets through error messages", }, { cve: "CVE-2024-47804", cwe: { id: "CWE-1220", name: "Insufficient Granularity of Access Control", }, discovery_date: "2024-10-02T16:01:28.440675+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2316131", }, ], notes: [ { category: "description", text: "A flaw was found in Jenkins. When attempting to create an item prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API, if either of these checks fail, Jenkins creates the item in memory and only deletes it from disk. This may allow an attacker with the Item/Configure permission to save the item, effectively bypassing the item creation restriction.", title: "Vulnerability description", }, { category: "summary", text: "jenkins: Item creation restriction bypass vulnerability", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2024-47804", }, { category: "external", summary: "RHBZ#2316131", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2316131", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2024-47804", url: "https://www.cve.org/CVERecord?id=CVE-2024-47804", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-47804", }, { category: "external", summary: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", url: "https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3448", }, ], release_date: "2024-10-02T15:35:03.020000+00:00", remediations: [ { category: "vendor_fix", date: "2024-11-05T12:08:31+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://access.redhat.com/articles/11258", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2024:8887", }, { category: "workaround", details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", product_ids: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", version: "3.1", }, products: [ "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-0:2.462.3.1729839924-3.el8.src", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.noarch", "8Base-OCP-Tools-4.13:jenkins-2-plugins-0:4.13.1729840148-1.el8.src", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "jenkins: Item creation restriction bypass vulnerability", }, ], }
wid-sec-w-2024-3347
Vulnerability from csaf_certbund
Notes
{ document: { aggregate_severity: { text: "mittel", }, category: "csaf_base", csaf_version: "2.0", distribution: { tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "de-DE", notes: [ { category: "legal_disclaimer", text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.", }, { category: "description", text: "Apache Sling ist ein Open Source-Webframework für die Java-Plattform.", title: "Produktbeschreibung", }, { category: "summary", text: "Ein entfernter Angreifer kann eine Schwachstelle in Apache Sling ausnutzen, um Sicherheitsvorkehrungen zu umgehen.", title: "Angriff", }, { category: "general", text: "- Linux\n- Sonstiges\n- UNIX\n- Windows", title: "Betroffene Betriebssysteme", }, ], publisher: { category: "other", contact_details: "csaf-provider@cert-bund.de", name: "Bundesamt für Sicherheit in der Informationstechnik", namespace: "https://www.bsi.bund.de", }, references: [ { category: "self", summary: "WID-SEC-W-2024-3347 - CSAF Version", url: "https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2024-3347.json", }, { category: "self", summary: "WID-SEC-2024-3347 - Portal Version", url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3347", }, { category: "external", summary: "GitHub Advisory Database vom 2021-12-16", url: "https://github.com/advisories/GHSA-c69w-jj56-834w", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2024:8887 vom 2024-11-05", url: "https://access.redhat.com/errata/RHSA-2024:8887", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2024:8886 vom 2024-11-05", url: "https://access.redhat.com/errata/RHSA-2024:8886", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2024:8885 vom 2024-11-05", url: "https://access.redhat.com/errata/RHSA-2024:8885", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2024:8884 vom 2024-11-05", url: "https://access.redhat.com/errata/RHSA-2024:8884", }, ], source_lang: "en-US", title: "Apache Sling: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen", tracking: { current_release_date: "2024-11-05T23:00:00.000+00:00", generator: { date: "2024-11-06T11:45:51.356+00:00", engine: { name: "BSI-WID", version: "1.3.8", }, }, id: "WID-SEC-W-2024-3347", initial_release_date: "2021-12-16T23:00:00.000+00:00", revision_history: [ { date: "2021-12-16T23:00:00.000+00:00", number: "1", summary: "Initiale Fassung", }, { date: "2024-11-05T23:00:00.000+00:00", number: "2", summary: "Neue Updates von Red Hat aufgenommen", }, ], status: "final", version: "2", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version_range", name: "<2.0", product: { name: "Apache Sling <2.0", product_id: "T021370", }, }, { category: "product_version", name: "2", product: { name: "Apache Sling 2.0", product_id: "T021370-fixed", product_identification_helper: { cpe: "cpe:/a:apache:sling:2.0", }, }, }, ], category: "product_name", name: "Sling", }, ], category: "vendor", name: "Apache", }, { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux", product: { name: "Red Hat Enterprise Linux", product_id: "67646", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:-", }, }, }, ], category: "vendor", name: "Red Hat", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", notes: [ { category: "description", text: "Es existiert eine Schwachstelle in Apache Sling. Der Fehler besteht aufgrund einer unsachgemäßen Zertifikatsvalidierung in der Komponente Commons Messaging Mail. Ein entfernter Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsmaßnahmen zu umgehen.", }, ], product_status: { known_affected: [ "67646", "T021370", ], }, release_date: "2021-12-16T23:00:00.000+00:00", title: "CVE-2021-44549", }, ], }
wid-sec-w-2024-3302
Vulnerability from csaf_certbund
Notes
{ document: { aggregate_severity: { text: "hoch", }, category: "csaf_base", csaf_version: "2.0", distribution: { tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "de-DE", notes: [ { category: "legal_disclaimer", text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.", }, { category: "description", text: "Keycloak ermöglicht Single Sign-On mit Identity and Access Management für moderne Anwendungen und Dienste.", title: "Produktbeschreibung", }, { category: "summary", text: "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um Informationen offenzulegen.", title: "Angriff", }, { category: "general", text: "- UNIX", title: "Betroffene Betriebssysteme", }, ], publisher: { category: "other", contact_details: "csaf-provider@cert-bund.de", name: "Bundesamt für Sicherheit in der Informationstechnik", namespace: "https://www.bsi.bund.de", }, references: [ { category: "self", summary: "WID-SEC-W-2024-3302 - CSAF Version", url: "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3302.json", }, { category: "self", summary: "WID-SEC-2024-3302 - Portal Version", url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3302", }, { category: "external", summary: "Keycloak Release Notes vom 2024-10-29", url: "https://www.keycloak.org/2024/10/keycloak-2604-released", }, ], source_lang: "en-US", title: "Keycloak: Schwachstelle ermöglicht Offenlegung von Informationen", tracking: { current_release_date: "2024-10-29T23:00:00.000+00:00", generator: { date: "2024-10-30T12:08:09.823+00:00", engine: { name: "BSI-WID", version: "1.3.8", }, }, id: "WID-SEC-W-2024-3302", initial_release_date: "2024-10-29T23:00:00.000+00:00", revision_history: [ { date: "2024-10-29T23:00:00.000+00:00", number: "1", summary: "Initiale Fassung", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version_range", name: "<26.0.4", product: { name: "Open Source Keycloak <26.0.4", product_id: "T038693", }, }, { category: "product_version", name: "26.0.4", product: { name: "Open Source Keycloak 26.0.4", product_id: "T038693-fixed", product_identification_helper: { cpe: "cpe:/a:keycloak:keycloak:26.0.4", }, }, }, ], category: "product_name", name: "Keycloak", }, ], category: "vendor", name: "Open Source", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", notes: [ { category: "description", text: "Es besteht eine Schwachstelle in Keycloak. Dieser Fehler existiert wegen deaktivierter Server-Identitätsprüfungen in der Komponente SimpleMailService, was unsichere SMTPS-Verbindungen ermöglicht. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um Man-in-the-Middle-Angriffe durchzuführen und vertrauliche Informationen während der E-Mail-Übertragung abzufangen.", }, ], product_status: { known_affected: [ "T038693", ], }, release_date: "2024-10-29T23:00:00.000+00:00", title: "CVE-2021-44549", }, ], }
wid-sec-w-2024-3147
Vulnerability from csaf_certbund
Notes
{ document: { aggregate_severity: { text: "hoch", }, category: "csaf_base", csaf_version: "2.0", distribution: { tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "de-DE", notes: [ { category: "legal_disclaimer", text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.", }, { category: "description", text: "Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.\r\nRed Hat OpenStack ist eine Sammlung von Diensten, um Cloud-Computing in Form von Infrastructure as a Service (IaaS) bereitstellen zu können.\r\nRed Hat OpenShift ist eine \"Platform as a Service\" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud.\r\nApache Camel ist ein Integrations-Framework, das Enterprise Integration Patterns implementiert.\r\nJBoss Enterprise Application Platform ist eine skalierbare Plattform für Java-Anwendungen, inklusive JBoss Application Server, JBoss Hibernate und Boss Seam.\r\nRed Hat JBoss Data Grid ist eine verteilte In-Memory-Datenbank für den schnellen Zugriff auf große Datenvolumen und Skalierbarkeit.", title: "Produktbeschreibung", }, { category: "summary", text: "Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Red Hat-Produkten ausnutzen, um Dateien zu manipulieren, beliebigen Code auszuführen und einen Denial-of-Service-Zustand zu erzeugen.", title: "Angriff", }, { category: "general", text: "- Sonstiges\n- UNIX\n- Windows", title: "Betroffene Betriebssysteme", }, ], publisher: { category: "other", contact_details: "csaf-provider@cert-bund.de", name: "Bundesamt für Sicherheit in der Informationstechnik", namespace: "https://www.bsi.bund.de", }, references: [ { category: "self", summary: "WID-SEC-W-2024-3147 - CSAF Version", url: "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3147.json", }, { category: "self", summary: "WID-SEC-2024-3147 - Portal Version", url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3147", }, { category: "external", summary: "Red Hat Security Advisory vom 2024-10-10", url: "https://access.redhat.com/errata/RHSA-2024:7670", }, { category: "external", summary: "Red Hat Security Advisory vom 2024-10-10", url: "https://access.redhat.com/errata/RHSA-2024:7676", }, { category: "external", summary: "Red Hat Security Advisory vom 2024-10-10", url: "https://access.redhat.com/errata/RHSA-2024:7972", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2024:8093 vom 2024-10-14", url: "https://access.redhat.com/errata/RHSA-2024:8093", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2024:8329 vom 2024-10-22", url: "https://access.redhat.com/errata/RHSA-2024:8329", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2024:9571 vom 2024-11-13", url: "https://access.redhat.com/errata/RHSA-2024:9571", }, { category: "external", summary: "Amazon Linux Security Advisory ALAS-2024-2693 vom 2024-11-15", url: "https://alas.aws.amazon.com/AL2/ALAS-2024-2693.html", }, { category: "external", summary: "NetApp Security Advisory NTAP-20241213-0010 vom 2024-12-13", url: "https://security.netapp.com/advisory/ntap-20241213-0010/", }, ], source_lang: "en-US", title: "Red Hat Produkte: Mehrere Schwachstellen", tracking: { current_release_date: "2024-12-12T23:00:00.000+00:00", generator: { date: "2024-12-13T12:42:03.404+00:00", engine: { name: "BSI-WID", version: "1.3.10", }, }, id: "WID-SEC-W-2024-3147", initial_release_date: "2024-10-10T22:00:00.000+00:00", revision_history: [ { date: "2024-10-10T22:00:00.000+00:00", number: "1", summary: "Initiale Fassung", }, { date: "2024-10-14T22:00:00.000+00:00", number: "2", summary: "Neue Updates von Red Hat aufgenommen", }, { date: "2024-10-15T22:00:00.000+00:00", number: "3", summary: "Anpassung im Text", }, { date: "2024-10-22T22:00:00.000+00:00", number: "4", summary: "Neue Updates von Red Hat aufgenommen", }, { date: "2024-11-13T23:00:00.000+00:00", number: "5", summary: "Neue Updates von Red Hat aufgenommen", }, { date: "2024-11-17T23:00:00.000+00:00", number: "6", summary: "Neue Updates von Amazon aufgenommen", }, { date: "2024-12-12T23:00:00.000+00:00", number: "7", summary: "Neue Updates von NetApp aufgenommen", }, ], status: "final", version: "7", }, }, product_tree: { branches: [ { branches: [ { category: "product_name", name: "Amazon Linux 2", product: { name: "Amazon Linux 2", product_id: "398363", product_identification_helper: { cpe: "cpe:/o:amazon:linux_2:-", }, }, }, ], category: "vendor", name: "Amazon", }, { branches: [ { category: "product_name", name: "Apache Camel", product: { name: "Apache Camel", product_id: "T038266", product_identification_helper: { cpe: "cpe:/a:apache:camel:-", }, }, }, ], category: "vendor", name: "Apache", }, { branches: [ { category: "product_name", name: "NetApp ActiveIQ Unified Manager", product: { name: "NetApp ActiveIQ Unified Manager", product_id: "T016960", product_identification_helper: { cpe: "cpe:/a:netapp:active_iq_unified_manager:-", }, }, }, ], category: "vendor", name: "NetApp", }, { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux", product: { name: "Red Hat Enterprise Linux", product_id: "67646", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:-", }, }, }, { category: "product_version", name: "Cryostat 3", product: { name: "Red Hat Enterprise Linux Cryostat 3", product_id: "T036943", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:cryostat_3", }, }, }, { category: "product_version", name: "7", product: { name: "Red Hat Enterprise Linux 7", product_id: "T038260", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7", }, }, }, { category: "product_version", name: "8", product: { name: "Red Hat Enterprise Linux 8", product_id: "T038261", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:8", }, }, }, { category: "product_version", name: "9", product: { name: "Red Hat Enterprise Linux 9", product_id: "T038262", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:9", }, }, }, { category: "product_version", name: "AI", product: { name: "Red Hat Enterprise Linux AI", product_id: "T038263", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:ai", }, }, }, ], category: "product_name", name: "Enterprise Linux", }, { branches: [ { category: "product_version", name: "8", product: { name: "Red Hat JBoss Data Grid 8", product_id: "T038268", product_identification_helper: { cpe: "cpe:/a:redhat:jboss_data_grid:8", }, }, }, ], category: "product_name", name: "JBoss Data Grid", }, { branches: [ { category: "product_version_range", name: "Quarkus <3.8.6.SP1", product: { name: "Red Hat JBoss Enterprise Application Platform Quarkus <3.8.6.SP1", product_id: "T038267", }, }, { category: "product_version", name: "Quarkus 3.8.6.SP1", product: { name: "Red Hat JBoss Enterprise Application Platform Quarkus 3.8.6.SP1", product_id: "T038267-fixed", product_identification_helper: { cpe: "cpe:/a:redhat:jboss_enterprise_application_platform:quarkus__3.8.6.sp1", }, }, }, { category: "product_version_range", name: "Quarkus <3.2.12.SP1", product: { name: "Red Hat JBoss Enterprise Application Platform Quarkus <3.2.12.SP1", product_id: "T038269", }, }, { category: "product_version", name: "Quarkus 3.2.12.SP1", product: { name: "Red Hat JBoss Enterprise Application Platform Quarkus 3.2.12.SP1", product_id: "T038269-fixed", product_identification_helper: { cpe: "cpe:/a:redhat:jboss_enterprise_application_platform:quarkus__3.2.12.sp1", }, }, }, ], category: "product_name", name: "JBoss Enterprise Application Platform", }, { category: "product_name", name: "Red Hat OpenShift", product: { name: "Red Hat OpenShift", product_id: "T038265", product_identification_helper: { cpe: "cpe:/a:redhat:openshift:-", }, }, }, { branches: [ { category: "product_version", name: "16.2", product: { name: "Red Hat OpenStack 16.2", product_id: "T038264", product_identification_helper: { cpe: "cpe:/a:redhat:openstack:16.2", }, }, }, ], category: "product_name", name: "OpenStack", }, ], category: "vendor", name: "Red Hat", }, ], }, vulnerabilities: [ { cve: "CVE-2021-44549", notes: [ { category: "description", text: "Es besteht eine Schwachstelle in mehreren Red-Hat-Produkten. Dieser Fehler betrifft die Apache Sling Commons Messaging Mail Komponente aufgrund der fehlenden Server-Identitätsprüfung. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, indem er einen Man-in-the-Middle-Angriff durchführt und so den E-Mail-Verkehr abfängt, verändert oder abhört, indem er sich als legitimer Mailserver ausgibt.", }, ], product_status: { known_affected: [ "67646", "T036943", "T038269", "T038265", "T016960", "T038266", "T038267", "T038268", "T038261", "T038262", "T038263", "T038264", "T038260", "398363", ], }, release_date: "2024-10-10T22:00:00.000+00:00", title: "CVE-2021-44549", }, { cve: "CVE-2024-40094", notes: [ { category: "description", text: "Es besteht eine Schwachstelle in mehreren Red-Hat-Produkten. Dieser Fehler betrifft die GraphQL-Java-Komponente aufgrund einer unsachgemäßen Behandlung von ExecutableNormalizedFields (ENFs) während Introspektionsabfragen, was zu einer Erschöpfung der Ressourcen führt. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.", }, ], product_status: { known_affected: [ "67646", "T036943", "T038269", "T038265", "T016960", "T038266", "T038267", "T038268", "T038261", "T038262", "T038263", "T038264", "T038260", "398363", ], }, release_date: "2024-10-10T22:00:00.000+00:00", title: "CVE-2024-40094", }, { cve: "CVE-2024-47561", notes: [ { category: "description", text: "Es besteht eine Schwachstelle in mehreren Red-Hat-Produkten. Dieser Fehler betrifft die Apache-Avro-Komponente aufgrund einer unsachgemäßen Behandlung von vom Benutzer bereitgestellten Avro-Schemata, wenn diese das spezielle „java-class“-Attribut enthalten, was bösartige Eingaben ermöglicht. Ein entfernter, authentisierter Angreifer kann diese Schwachstelle ausnutzen, um beliebigen Code auszuführen, indem er das Parsen eines manipulierten Avro-Schemas ausnutzt.", }, ], product_status: { known_affected: [ "67646", "T036943", "T038269", "T038265", "T016960", "T038266", "T038267", "T038268", "T038261", "T038262", "T038263", "T038264", "T038260", "398363", ], }, release_date: "2024-10-10T22:00:00.000+00:00", title: "CVE-2024-47561", }, { cve: "CVE-2024-7254", notes: [ { category: "description", text: "Es besteht eine Schwachstelle in mehreren Red-Hat-Produkten. Dieser Fehler besteht aufgrund einer unbegrenzten Rekursion beim Parsen von Protokollpufferdaten, die beliebig verschachtelte SGROUP-Tags enthalten, was zu einem Stapelüberlauf führt. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.", }, ], product_status: { known_affected: [ "67646", "T036943", "T038269", "T038265", "T016960", "T038266", "T038267", "T038268", "T038261", "T038262", "T038263", "T038264", "T038260", "398363", ], }, release_date: "2024-10-10T22:00:00.000+00:00", title: "CVE-2024-7254", }, ], }
ghsa-c69w-jj56-834w
Vulnerability from github
Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via SMTPS. To reduce the risk of "man in the middle" attacks additional server identity checks must be performed when accessing mail servers. For compatibility reasons these additional checks are disabled by default in JavaMail/Jakarta Mail. The SimpleMailService in Apache Sling Commons Messaging Mail 1.0 lacks an option to enable these checks for the shared mail session. A user could enable these checks nevertheless by accessing the session via the message created by SimpleMessageBuilder and setting the property mail.smtps.ssl.checkserveridentity to true. Apache Sling Commons Messaging Mail 2.0 adds support for enabling server identity checks and these checks are enabled by default. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429
{ affected: [ { package: { ecosystem: "Maven", name: "org.apache.sling:org.apache.sling.commons.messaging.mail", }, ranges: [ { events: [ { introduced: "0", }, { fixed: "2.0", }, ], type: "ECOSYSTEM", }, ], }, ], aliases: [ "CVE-2021-44549", ], database_specific: { cwe_ids: [ "CWE-295", "CWE-297", ], github_reviewed: true, github_reviewed_at: "2021-12-15T15:15:17Z", nvd_published_at: "2021-12-14T16:15:00Z", severity: "HIGH", }, details: "Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via SMTPS. To reduce the risk of \"man in the middle\" attacks additional server identity checks must be performed when accessing mail servers. For compatibility reasons these additional checks are disabled by default in JavaMail/Jakarta Mail. The SimpleMailService in Apache Sling Commons Messaging Mail 1.0 lacks an option to enable these checks for the shared mail session. A user could enable these checks nevertheless by accessing the session via the message created by SimpleMessageBuilder and setting the property mail.smtps.ssl.checkserveridentity to true. Apache Sling Commons Messaging Mail 2.0 adds support for enabling server identity checks and these checks are enabled by default. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429", id: "GHSA-c69w-jj56-834w", modified: "2022-01-04T19:09:34Z", published: "2021-12-16T14:12:49Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2021-44549", }, { type: "WEB", url: "https://github.com/eclipse-ee4j/mail/issues/429", }, { type: "PACKAGE", url: "https://github.com/eclipse-ee4j", }, { type: "WEB", url: "https://javaee.github.io/javamail/docs/SSLNOTES.txt", }, { type: "WEB", url: "https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html", }, { type: "WEB", url: "https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f", }, ], schema_version: "1.4.0", severity: [ { score: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", type: "CVSS_V3", }, ], summary: "Improper Certificate Validation and Improper Validation of Certificate with Host Mismatch in Apache Sling Commons Messaging Mail", }
Log in or create an account to share your comment.
This schema specifies the format of a comment related to a security advisory.
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.