RHBA-2020_0017
Vulnerability from csaf_redhat - Published: 2020-01-14 05:32 - Updated: 2024-11-22 13:45In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:expandableTextBox form control interpreted its content as HTML when expanded, resulting in a stored XSS vulnerability exploitable by users with permission to define its contents (typically Job/Configure).
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch | — |
In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:combobox form control interpreted its item labels as HTML, resulting in a stored XSS vulnerability exploitable by users with permission to define its contents.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch | — |
Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the SCM tag name on the tooltip for SCM tag actions, resulting in a stored XSS vulnerability exploitable by users able to control SCM tag names for these actions.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch | — |
Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the reason why a queue items is blcoked in tooltips, resulting in a stored XSS vulnerability exploitable by users able to control parts of the reason a queue item is blocked, such as label expressions not matching any idle executors.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch | — |
Jenkins 2.196 and earlier, LTS 2.176.3 and earlier printed the value of the "Cookie" HTTP request header on the /whoAmI/ URL, allowing attackers exploiting another XSS vulnerability to obtain the HTTP session cookie despite it being marked HttpOnly.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch | — |
Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not restrict or filter values set as Jenkins URL in the global configuration, resulting in a stored XSS vulnerability exploitable by attackers with Overall/Administer permission.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64 | — | ||
| Unresolved product id: 7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch | — |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 3.11.161 is now available with\nupdates to packages and images that fix several bugs and add enhancements.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the RPM packages for Red Hat OpenShift Container\nPlatform 3.11.161. See the following advisory for the container images for\nthis release:\n\nhttps://access.redhat.com/errata/RHBA-2020:0018\n\nThis release fixes the following bugs:\n\n* In the openshift-logging update using Ansible, if a new value was set in the inventory file to apply the change to the existing cluster, the change was ignored. This occurred because the module logging_patch accidentally created a patch to change a new file into the original file. The patching direction was fixed and the changes made in an inventory file are now correctly applied. (BZ#1753593)\n\n* When the SDN pod was restarted on a node, it did not clean up any old Egress IP addresses. If the set of Egress IP addresses assigned to a node changed while the SDN pod was not running, then the node might continue to claim that it owned the Egress IP even after the IP had been assigned to another node. This caused traffic to that IP to be delivered to the wrong node and be lost. The SDN pod now cleans up stale Egress IP addresses at startup. (BZ#1762235)\n\n* SDN code would declare each node as READY before the SDN proxy was completely initialized. Some iptables rules would not be populated and the node is marked as ready. This caused some pods to not be able to communicate with the API while coming up. Now, all iptables rules exist before pods get schedules to the node, preventing issues where pod\u0027s cannot communicate with the API server. (BZ#1764150)\n\nThis release includes the following enhancements: \n\n* The latest Kuryr images are now hosted in Red Hat\u0027s registry. (BZ#1652571)\n\nAll OpenShift Container Platform 3.11 users are advised to upgrade to these\nupdated packages and images.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHBA-2020:0017",
"url": "https://access.redhat.com/errata/RHBA-2020:0017"
},
{
"category": "external",
"summary": "1652571",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1652571"
},
{
"category": "external",
"summary": "1668853",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668853"
},
{
"category": "external",
"summary": "1753593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1753593"
},
{
"category": "external",
"summary": "1753601",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1753601"
},
{
"category": "external",
"summary": "1755120",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1755120"
},
{
"category": "external",
"summary": "1761875",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1761875"
},
{
"category": "external",
"summary": "1762235",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1762235"
},
{
"category": "external",
"summary": "1764150",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764150"
},
{
"category": "external",
"summary": "1768612",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1768612"
},
{
"category": "external",
"summary": "1775782",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775782"
},
{
"category": "external",
"summary": "1777062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1777062"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_0017.json"
}
],
"title": "Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update",
"tracking": {
"current_release_date": "2024-11-22T13:45:54+00:00",
"generator": {
"date": "2024-11-22T13:45:54+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHBA-2020:0017",
"initial_release_date": "2020-01-14T05:32:16+00:00",
"revision_history": [
{
"date": "2020-01-14T05:32:16+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-01-14T05:32:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T13:45:54+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 3.11",
"product": {
"name": "Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:3.11::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le",
"product": {
"name": "golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le",
"product_id": "golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.161-1.git.1.934cf10.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le",
"product": {
"name": "openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le",
"product_id": "openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.161-1.git.1.cf7169d.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"product": {
"name": "atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"product_id": "atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-enterprise-service-catalog@3.11.161-1.git.1.63434de.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"product": {
"name": "atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"product_id": "atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-enterprise-service-catalog-svcat@3.11.161-1.git.1.63434de.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le",
"product": {
"name": "atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le",
"product_id": "atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.161-1.git.1.5d93e31.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le",
"product": {
"name": "atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le",
"product_id": "atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-service-idler@3.11.161-1.git.1.88f46ce.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le",
"product": {
"name": "atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le",
"product_id": "atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.161-1.git.1.5e2b4e0.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le",
"product": {
"name": "openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le",
"product_id": "openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.161-1.git.1.032be79.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le",
"product": {
"name": "prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le",
"product_id": "prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/prometheus-node-exporter@3.11.161-1.git.1.c82b9a8.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le",
"product": {
"name": "atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le",
"product_id": "atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.161-1.git.1.ee040c2.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le",
"product": {
"name": "prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le",
"product_id": "prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/prometheus@3.11.161-1.git.1.3f7d286.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le",
"product": {
"name": "atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le",
"product_id": "atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-web-console@3.11.161-1.git.1.809b03f.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le",
"product": {
"name": "prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le",
"product_id": "prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/prometheus-alertmanager@3.11.161-1.git.1.823bae5.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le",
"product": {
"name": "atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le",
"product_id": "atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-descheduler@3.11.161-1.git.1.61a41f1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product": {
"name": "atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_id": "atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift@3.11.161-1.git.0.4ccbe25.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product": {
"name": "atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_id": "atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-clients@3.11.161-1.git.0.4ccbe25.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product": {
"name": "atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_id": "atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-hyperkube@3.11.161-1.git.0.4ccbe25.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product": {
"name": "atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_id": "atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-hypershift@3.11.161-1.git.0.4ccbe25.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product": {
"name": "atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_id": "atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-master@3.11.161-1.git.0.4ccbe25.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product": {
"name": "atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_id": "atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-node@3.11.161-1.git.0.4ccbe25.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product": {
"name": "atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_id": "atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-pod@3.11.161-1.git.0.4ccbe25.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product": {
"name": "atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_id": "atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-sdn-ovs@3.11.161-1.git.0.4ccbe25.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product": {
"name": "atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_id": "atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-template-service-broker@3.11.161-1.git.0.4ccbe25.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product": {
"name": "atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_id": "atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-tests@3.11.161-1.git.0.4ccbe25.el7?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64",
"product": {
"name": "golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64",
"product_id": "golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.161-1.git.1.934cf10.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64",
"product": {
"name": "openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64",
"product_id": "openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.161-1.git.1.cf7169d.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64",
"product": {
"name": "atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64",
"product_id": "atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-enterprise-service-catalog@3.11.161-1.git.1.63434de.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64",
"product": {
"name": "atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64",
"product_id": "atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-enterprise-service-catalog-svcat@3.11.161-1.git.1.63434de.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64",
"product": {
"name": "atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64",
"product_id": "atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.161-1.git.1.5d93e31.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64",
"product": {
"name": "atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64",
"product_id": "atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-service-idler@3.11.161-1.git.1.88f46ce.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64",
"product": {
"name": "atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64",
"product_id": "atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.161-1.git.1.5e2b4e0.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64",
"product": {
"name": "openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64",
"product_id": "openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.161-1.git.1.032be79.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64",
"product": {
"name": "atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64",
"product_id": "atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-dockerregistry@3.11.161-1.git.1.a000456.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64",
"product": {
"name": "prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64",
"product_id": "prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/prometheus-node-exporter@3.11.161-1.git.1.c82b9a8.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64",
"product": {
"name": "atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64",
"product_id": "atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.161-1.git.1.ee040c2.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64",
"product": {
"name": "prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64",
"product_id": "prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/prometheus@3.11.161-1.git.1.3f7d286.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64",
"product": {
"name": "atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64",
"product_id": "atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-web-console@3.11.161-1.git.1.809b03f.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64",
"product": {
"name": "prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64",
"product_id": "prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/prometheus-alertmanager@3.11.161-1.git.1.823bae5.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64",
"product": {
"name": "atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64",
"product_id": "atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-descheduler@3.11.161-1.git.1.61a41f1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product": {
"name": "atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_id": "atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift@3.11.161-1.git.0.4ccbe25.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product": {
"name": "atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_id": "atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-clients@3.11.161-1.git.0.4ccbe25.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product": {
"name": "atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_id": "atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-clients-redistributable@3.11.161-1.git.0.4ccbe25.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product": {
"name": "atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_id": "atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-hyperkube@3.11.161-1.git.0.4ccbe25.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product": {
"name": "atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_id": "atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-hypershift@3.11.161-1.git.0.4ccbe25.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product": {
"name": "atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_id": "atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-master@3.11.161-1.git.0.4ccbe25.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product": {
"name": "atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_id": "atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-node@3.11.161-1.git.0.4ccbe25.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product": {
"name": "atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_id": "atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-pod@3.11.161-1.git.0.4ccbe25.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product": {
"name": "atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_id": "atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-sdn-ovs@3.11.161-1.git.0.4ccbe25.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product": {
"name": "atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_id": "atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-template-service-broker@3.11.161-1.git.0.4ccbe25.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product": {
"name": "atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_id": "atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-tests@3.11.161-1.git.0.4ccbe25.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src",
"product": {
"name": "golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src",
"product_id": "golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.161-1.git.1.934cf10.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src",
"product": {
"name": "openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src",
"product_id": "openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kuryr@3.11.161-1.git.1.33697e5.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src",
"product": {
"name": "openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src",
"product_id": "openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.161-1.git.1.cf7169d.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src",
"product": {
"name": "atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src",
"product_id": "atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-enterprise-service-catalog@3.11.161-1.git.1.63434de.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src",
"product": {
"name": "atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src",
"product_id": "atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.161-1.git.1.5d93e31.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src",
"product": {
"name": "atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src",
"product_id": "atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-service-idler@3.11.161-1.git.1.88f46ce.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src",
"product": {
"name": "atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src",
"product_id": "atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.161-1.git.1.5e2b4e0.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src",
"product": {
"name": "openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src",
"product_id": "openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.161-1.git.1.032be79.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src",
"product": {
"name": "atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src",
"product_id": "atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-dockerregistry@3.11.161-1.git.1.a000456.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src",
"product": {
"name": "golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src",
"product_id": "golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-github-prometheus-node_exporter@3.11.161-1.git.1.c82b9a8.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src",
"product": {
"name": "atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src",
"product_id": "atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.161-1.git.1.ee040c2.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src",
"product": {
"name": "golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src",
"product_id": "golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-github-prometheus-prometheus@3.11.161-1.git.1.3f7d286.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src",
"product": {
"name": "atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src",
"product_id": "atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-web-console@3.11.161-1.git.1.809b03f.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src",
"product": {
"name": "golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src",
"product_id": "golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-github-prometheus-alertmanager@3.11.161-1.git.1.823bae5.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src",
"product": {
"name": "atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src",
"product_id": "atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-descheduler@3.11.161-1.git.1.61a41f1.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src",
"product": {
"name": "atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src",
"product_id": "atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift@3.11.161-1.git.0.4ccbe25.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:3.11.1577428005-1.el7.src",
"product": {
"name": "jenkins-2-plugins-0:3.11.1577428005-1.el7.src",
"product_id": "jenkins-2-plugins-0:3.11.1577428005-1.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@3.11.1577428005-1.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src",
"product": {
"name": "openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src",
"product_id": "openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-ansible@3.11.161-2.git.5.029d67f.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.176.4.1578402941-1.el7.src",
"product": {
"name": "jenkins-0:2.176.4.1578402941-1.el7.src",
"product_id": "jenkins-0:2.176.4.1578402941-1.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.176.4.1578402941-1.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch",
"product": {
"name": "openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch",
"product_id": "openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kuryr-cni@3.11.161-1.git.1.33697e5.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch",
"product": {
"name": "openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch",
"product_id": "openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kuryr-common@3.11.161-1.git.1.33697e5.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch",
"product": {
"name": "openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch",
"product_id": "openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kuryr-controller@3.11.161-1.git.1.33697e5.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch",
"product": {
"name": "python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch",
"product_id": "python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python2-kuryr-kubernetes@3.11.161-1.git.1.33697e5.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"product": {
"name": "atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"product_id": "atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-docker-excluder@3.11.161-1.git.0.4ccbe25.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"product": {
"name": "atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"product_id": "atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/atomic-openshift-excluder@3.11.161-1.git.0.4ccbe25.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch",
"product": {
"name": "jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch",
"product_id": "jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins@3.11.1577428005-1.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch",
"product": {
"name": "openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch",
"product_id": "openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-ansible@3.11.161-2.git.5.029d67f.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch",
"product": {
"name": "openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch",
"product_id": "openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-ansible-docs@3.11.161-2.git.5.029d67f.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch",
"product": {
"name": "openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch",
"product_id": "openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-ansible-playbooks@3.11.161-2.git.5.029d67f.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch",
"product": {
"name": "openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch",
"product_id": "openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-ansible-roles@3.11.161-2.git.5.029d67f.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch",
"product": {
"name": "openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch",
"product_id": "openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-ansible-test@3.11.161-2.git.5.029d67f.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jenkins-0:2.176.4.1578402941-1.el7.noarch",
"product": {
"name": "jenkins-0:2.176.4.1578402941-1.el7.noarch",
"product_id": "jenkins-0:2.176.4.1578402941-1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.176.4.1578402941-1.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le"
},
"product_reference": "atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src"
},
"product_reference": "atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64"
},
"product_reference": "atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le"
},
"product_reference": "atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64"
},
"product_reference": "atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le"
},
"product_reference": "atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src"
},
"product_reference": "atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64"
},
"product_reference": "atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le"
},
"product_reference": "atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64"
},
"product_reference": "atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64"
},
"product_reference": "atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le"
},
"product_reference": "atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src"
},
"product_reference": "atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64"
},
"product_reference": "atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le"
},
"product_reference": "atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src"
},
"product_reference": "atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64"
},
"product_reference": "atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch"
},
"product_reference": "atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src"
},
"product_reference": "atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64"
},
"product_reference": "atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch"
},
"product_reference": "atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le"
},
"product_reference": "atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64"
},
"product_reference": "atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le"
},
"product_reference": "atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64"
},
"product_reference": "atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le"
},
"product_reference": "atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64"
},
"product_reference": "atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le"
},
"product_reference": "atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src"
},
"product_reference": "atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64"
},
"product_reference": "atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le"
},
"product_reference": "atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64"
},
"product_reference": "atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le"
},
"product_reference": "atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src"
},
"product_reference": "atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64"
},
"product_reference": "atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le"
},
"product_reference": "atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64"
},
"product_reference": "atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le"
},
"product_reference": "atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64"
},
"product_reference": "atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le"
},
"product_reference": "atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src"
},
"product_reference": "atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64"
},
"product_reference": "atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le"
},
"product_reference": "atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64"
},
"product_reference": "atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le"
},
"product_reference": "atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64"
},
"product_reference": "atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le"
},
"product_reference": "atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src"
},
"product_reference": "atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64"
},
"product_reference": "atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le"
},
"product_reference": "golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src"
},
"product_reference": "golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64"
},
"product_reference": "golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src"
},
"product_reference": "golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src"
},
"product_reference": "golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src"
},
"product_reference": "golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.176.4.1578402941-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch"
},
"product_reference": "jenkins-0:2.176.4.1578402941-1.el7.noarch",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-0:2.176.4.1578402941-1.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
},
"product_reference": "jenkins-0:2.176.4.1578402941-1.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch"
},
"product_reference": "jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins-0:3.11.1577428005-1.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src"
},
"product_reference": "jenkins-2-plugins-0:3.11.1577428005-1.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch"
},
"product_reference": "openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src"
},
"product_reference": "openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch"
},
"product_reference": "openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch"
},
"product_reference": "openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch"
},
"product_reference": "openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch"
},
"product_reference": "openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le"
},
"product_reference": "openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src"
},
"product_reference": "openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64"
},
"product_reference": "openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le"
},
"product_reference": "openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src"
},
"product_reference": "openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64"
},
"product_reference": "openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src"
},
"product_reference": "openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch"
},
"product_reference": "openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch"
},
"product_reference": "openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch"
},
"product_reference": "openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le"
},
"product_reference": "prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64"
},
"product_reference": "prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le"
},
"product_reference": "prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64"
},
"product_reference": "prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le"
},
"product_reference": "prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64"
},
"product_reference": "prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11",
"product_id": "7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch"
},
"product_reference": "python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch",
"relates_to_product_reference": "7Server-RH7-RHOSE-3.11"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-10401",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2019-09-25T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64",
"7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1764357"
}
],
"notes": [
{
"category": "description",
"text": "In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:expandableTextBox form control interpreted its content as HTML when expanded, resulting in a stored XSS vulnerability exploitable by users with permission to define its contents (typically Job/Configure).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Stored XSS vulnerability in expandable textbox form control",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
],
"known_not_affected": [
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64",
"7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-10401"
},
{
"category": "external",
"summary": "RHBZ#1764357",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764357"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-10401",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-10401"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10401",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10401"
}
],
"release_date": "2019-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-01-14T05:32:16+00:00",
"details": "Before applying this update, ensure all previously released errata relevant\nto your system is applied.\n\nSee the following documentation, which will be updated shortly for release\n3.11.161, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:0017"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jenkins: Stored XSS vulnerability in expandable textbox form control"
},
{
"cve": "CVE-2019-10402",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2019-09-25T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64",
"7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1764363"
}
],
"notes": [
{
"category": "description",
"text": "In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:combobox form control interpreted its item labels as HTML, resulting in a stored XSS vulnerability exploitable by users with permission to define its contents.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: XSS vulnerability in combobox form control",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
],
"known_not_affected": [
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64",
"7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-10402"
},
{
"category": "external",
"summary": "RHBZ#1764363",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764363"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-10402",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-10402"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10402",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10402"
}
],
"release_date": "2019-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-01-14T05:32:16+00:00",
"details": "Before applying this update, ensure all previously released errata relevant\nto your system is applied.\n\nSee the following documentation, which will be updated shortly for release\n3.11.161, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:0017"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jenkins: XSS vulnerability in combobox form control"
},
{
"cve": "CVE-2019-10403",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2019-09-25T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64",
"7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1764366"
}
],
"notes": [
{
"category": "description",
"text": "Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the SCM tag name on the tooltip for SCM tag actions, resulting in a stored XSS vulnerability exploitable by users able to control SCM tag names for these actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Stored XSS vulnerability in SCM tag action tooltip",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
],
"known_not_affected": [
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64",
"7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-10403"
},
{
"category": "external",
"summary": "RHBZ#1764366",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764366"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-10403",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-10403"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10403",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10403"
}
],
"release_date": "2019-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-01-14T05:32:16+00:00",
"details": "Before applying this update, ensure all previously released errata relevant\nto your system is applied.\n\nSee the following documentation, which will be updated shortly for release\n3.11.161, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:0017"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jenkins: Stored XSS vulnerability in SCM tag action tooltip"
},
{
"cve": "CVE-2019-10404",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2019-09-25T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64",
"7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1764367"
}
],
"notes": [
{
"category": "description",
"text": "Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not escape the reason why a queue items is blcoked in tooltips, resulting in a stored XSS vulnerability exploitable by users able to control parts of the reason a queue item is blocked, such as label expressions not matching any idle executors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Stored XSS vulnerability in queue item tooltip",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
],
"known_not_affected": [
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64",
"7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-10404"
},
{
"category": "external",
"summary": "RHBZ#1764367",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764367"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-10404",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-10404"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10404",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10404"
}
],
"release_date": "2019-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-01-14T05:32:16+00:00",
"details": "Before applying this update, ensure all previously released errata relevant\nto your system is applied.\n\nSee the following documentation, which will be updated shortly for release\n3.11.161, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:0017"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jenkins: Stored XSS vulnerability in queue item tooltip"
},
{
"cve": "CVE-2019-10405",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2019-09-25T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64",
"7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1764369"
}
],
"notes": [
{
"category": "description",
"text": "Jenkins 2.196 and earlier, LTS 2.176.3 and earlier printed the value of the \"Cookie\" HTTP request header on the /whoAmI/ URL, allowing attackers exploiting another XSS vulnerability to obtain the HTTP session cookie despite it being marked HttpOnly.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Diagnostic web page exposed Cookie HTTP header",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
],
"known_not_affected": [
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64",
"7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-10405"
},
{
"category": "external",
"summary": "RHBZ#1764369",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764369"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-10405",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-10405"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10405",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10405"
}
],
"release_date": "2019-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-01-14T05:32:16+00:00",
"details": "Before applying this update, ensure all previously released errata relevant\nto your system is applied.\n\nSee the following documentation, which will be updated shortly for release\n3.11.161, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:0017"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jenkins: Diagnostic web page exposed Cookie HTTP header"
},
{
"cve": "CVE-2019-10406",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2019-09-25T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64",
"7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1764370"
}
],
"notes": [
{
"category": "description",
"text": "Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not restrict or filter values set as Jenkins URL in the global configuration, resulting in a stored XSS vulnerability exploitable by attackers with Overall/Administer permission.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: XSS vulnerability in Jenkins URL setting",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
],
"known_not_affected": [
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.161-1.git.1.63434de.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.161-1.git.1.ee040c2.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.161-1.git.1.61a41f1.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.161-1.git.1.a000456.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.161-1.git.0.4ccbe25.el7.noarch",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.161-1.git.1.5e2b4e0.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.161-1.git.1.5d93e31.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-service-idler-0:3.11.161-1.git.1.88f46ce.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-template-service-broker-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-tests-0:3.11.161-1.git.0.4ccbe25.el7.x86_64",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.src",
"7Server-RH7-RHOSE-3.11:atomic-openshift-web-console-0:3.11.161-1.git.1.809b03f.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-openshift-oauth-proxy-0:3.11.161-1.git.1.934cf10.el7.x86_64",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-node_exporter-0:3.11.161-1.git.1.c82b9a8.el7.src",
"7Server-RH7-RHOSE-3.11:golang-github-prometheus-prometheus-0:3.11.161-1.git.1.3f7d286.el7.src",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-2-plugins-0:3.11.1577428005-1.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-0:3.11.161-2.git.5.029d67f.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-ansible-docs-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-playbooks-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-roles-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-ansible-test-0:3.11.161-2.git.5.029d67f.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-autoheal-0:3.11.161-1.git.1.cf7169d.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-enterprise-cluster-capacity-0:3.11.161-1.git.1.032be79.el7.x86_64",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-0:3.11.161-1.git.1.33697e5.el7.src",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-cni-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-common-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:openshift-kuryr-controller-0:3.11.161-1.git.1.33697e5.el7.noarch",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-0:3.11.161-1.git.1.3f7d286.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-alertmanager-0:3.11.161-1.git.1.823bae5.el7.x86_64",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.ppc64le",
"7Server-RH7-RHOSE-3.11:prometheus-node-exporter-0:3.11.161-1.git.1.c82b9a8.el7.x86_64",
"7Server-RH7-RHOSE-3.11:python2-kuryr-kubernetes-0:3.11.161-1.git.1.33697e5.el7.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-10406"
},
{
"category": "external",
"summary": "RHBZ#1764370",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1764370"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-10406",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-10406"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10406",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10406"
}
],
"release_date": "2019-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-01-14T05:32:16+00:00",
"details": "Before applying this update, ensure all previously released errata relevant\nto your system is applied.\n\nSee the following documentation, which will be updated shortly for release\n3.11.161, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258.",
"product_ids": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:0017"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.noarch",
"7Server-RH7-RHOSE-3.11:jenkins-0:2.176.4.1578402941-1.el7.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jenkins: XSS vulnerability in Jenkins URL setting"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.