Vulnerability-Lookup

RHSA-2016:0070

Vulnerability from csaf_redhat - Published: 2016-01-26 19:12 - Updated: 2026-06-27 10:35

Summary

Red Hat Security Advisory: Red Hat OpenShift Enterprise 3.1.1 bug fix and enhancement update

Severity

Important

Notes

Topic: Red Hat OpenShift Enterprise release 3.1.1 is now available with updates to packages that fix several security issues, bugs and introduce feature enhancements. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details: OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments. The following security issues are addressed with this release: An authorization flaw was discovered in Kubernetes; the API server did not properly check user permissions when handling certain requests. An authenticated remote attacker could use this flaw to gain additional access to resources such as RAM and disk space. (CVE-2016-1905) An authorization flaw was discovered in Kubernetes; the API server did not properly check user permissions when handling certain build- configuration strategies. A remote attacker could create build configurations with strategies that violate policy. Although the attacker could not launch the build themselves (launch fails when the policy is violated), if the build configuration files were later launched by other privileged services (such as automated triggers), user privileges could be bypassed allowing attacker escalation. (CVE-2016-1906) An update for Jenkins Continuous Integration Server that addresses a large number of security issues including XSS, CSRF, information disclosure and code execution have been addressed as well. (CVE-2013-2186, CVE-2014-1869, CVE-2014-3661, CVE-2014-3662 CVE-2014-3663, CVE-2014-3664, CVE-2014-3666, CVE-2014-3667 CVE-2014-3680, CVE-2014-3681, CVE-2015-1806, CVE-2015-1807 CVE-2015-1808, CVE-2015-1810, CVE-2015-1812, CVE-2015-1813 CVE-2015-1814, CVE-2015-5317, CVE-2015-5318, CVE-2015-5319 CVE-2015-5320, CVE-2015-5321, CVE-2015-5322, CVE-2015-5323 CVE-2015-5324, CVE-2015-5325, CVE-2015-5326 ,CVE-2015-7537 CVE-2015-7538, CVE-2015-7539, CVE-2015-8103) Space precludes documenting all of the bug fixes and enhancements in this advisory. See the OpenShift Enterprise 3.1 Release Notes, which will be updated shortly for release 3.1.1, for details about these changes: https://docs.openshift.com/enterprise/3.1/release_notes/ose_3_1_release_notes.html All OpenShift Enterprise 3 users are advised to upgrade to these updated packages.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2013-2186

The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.

7.5 ()


                
                  AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-626 - Null Byte Interaction Error (Poison Null Byte)

Affected products

Fixed 254 products

Product	Version	Remediation
Unresolved product id: 7Server-RH7-RHOSE-3.1:atomic-openshift-0:3.1.1.6-1.git.0.b57e8bd.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:atomic-openshift-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:atomic-openshift-clients-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:atomic-openshift-clients-redistributable-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:atomic-openshift-dockerregistry-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:atomic-openshift-master-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:atomic-openshift-node-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:atomic-openshift-pod-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:atomic-openshift-recycle-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:atomic-openshift-sdn-ovs-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:atomic-openshift-utils-0:3.0.35-1.git.0.6a386dd.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:heapster-0:0.18.2-3.gitaf4752e.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:heapster-0:0.18.2-3.gitaf4752e.el7aos.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:jenkins-0:1.625.3-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:jenkins-0:1.625.3-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-align-text-0:0.1.3-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-align-text-0:0.1.3-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-ansi-green-0:0.1.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-ansi-green-0:0.1.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-ansi-wrap-0:0.1.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-ansi-wrap-0:0.1.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-anymatch-0:1.3.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-anymatch-0:1.3.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-arr-diff-0:2.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-arr-diff-0:2.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-arr-flatten-0:1.0.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-arr-flatten-0:1.0.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-array-unique-0:0.2.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-array-unique-0:0.2.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-arrify-0:1.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-arrify-0:1.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-async-each-0:1.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-async-each-0:1.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-binary-extensions-0:1.3.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-binary-extensions-0:1.3.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-braces-0:1.8.2-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-braces-0:1.8.2-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-capture-stack-trace-0:1.0.0-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-capture-stack-trace-0:1.0.0-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-chokidar-0:1.4.1-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-chokidar-0:1.4.1-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-configstore-0:1.4.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-configstore-0:1.4.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-create-error-class-0:2.0.1-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-create-error-class-0:2.0.1-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-deep-extend-0:0.3.2-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-deep-extend-0:0.3.2-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-duplexer-0:0.1.1-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-duplexer-0:0.1.1-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-duplexify-0:3.4.2-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-duplexify-0:3.4.2-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-end-of-stream-0:1.1.0-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-end-of-stream-0:1.1.0-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-error-ex-0:1.2.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-error-ex-0:1.2.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-es6-promise-0:3.0.2-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-es6-promise-0:3.0.2-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-event-stream-0:3.3.2-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-event-stream-0:3.3.2-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-expand-brackets-0:0.1.4-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-expand-brackets-0:0.1.4-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-expand-range-0:1.8.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-expand-range-0:1.8.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-extglob-0:0.3.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-extglob-0:0.3.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-filename-regex-0:2.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-filename-regex-0:2.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-fill-range-0:2.2.3-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-fill-range-0:2.2.3-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-for-in-0:0.1.4-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-for-in-0:0.1.4-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-for-own-0:0.1.3-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-for-own-0:0.1.3-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-from-0:0.1.3-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-from-0:0.1.3-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-glob-base-0:0.3.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-glob-base-0:0.3.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-glob-parent-0:2.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-glob-parent-0:2.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-got-0:5.2.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-got-0:5.2.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-graceful-fs-0:4.1.2-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-graceful-fs-0:4.1.2-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-ini-0:1.1.0-6.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-ini-0:1.1.0-6.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-binary-path-0:1.0.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-binary-path-0:1.0.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-dotfile-0:1.0.2-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-dotfile-0:1.0.2-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-equal-shallow-0:0.1.3-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-equal-shallow-0:0.1.3-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-extendable-0:0.1.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-extendable-0:0.1.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-extglob-0:1.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-extglob-0:1.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-glob-0:2.0.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-glob-0:2.0.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-npm-0:1.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-npm-0:1.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-number-0:2.1.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-number-0:2.1.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-plain-obj-0:1.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-plain-obj-0:1.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-primitive-0:2.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-primitive-0:2.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-redirect-0:1.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-redirect-0:1.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-stream-0:1.0.1-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-is-stream-0:1.0.1-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-isobject-0:2.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-isobject-0:2.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-kind-of-0:3.0.2-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-kind-of-0:3.0.2-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-latest-version-0:2.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-latest-version-0:2.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lazy-cache-0:1.0.2-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lazy-cache-0:1.0.2-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.assign-0:3.2.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.assign-0:3.2.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.baseassign-0:3.2.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.baseassign-0:3.2.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.basecopy-0:3.0.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.basecopy-0:3.0.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.bindcallback-0:3.0.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.bindcallback-0:3.0.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.createassigner-0:3.1.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.createassigner-0:3.1.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.defaults-0:3.1.2-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.defaults-0:3.1.2-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.getnative-0:3.9.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.getnative-0:3.9.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.isarguments-0:3.0.4-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.isarguments-0:3.0.4-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.isarray-0:3.0.4-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.isarray-0:3.0.4-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.isiterateecall-0:3.0.9-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.isiterateecall-0:3.0.9-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.keys-0:3.1.2-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.keys-0:3.1.2-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.restparam-0:3.6.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lodash.restparam-0:3.6.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lowercase-keys-0:1.0.0-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-lowercase-keys-0:1.0.0-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-map-stream-0:0.1.0-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-map-stream-0:0.1.0-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-micromatch-0:2.3.5-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-micromatch-0:2.3.5-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-mkdirp-0:0.5.0-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-mkdirp-0:0.5.0-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-node-status-codes-0:1.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-node-status-codes-0:1.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-nodemon-0:1.8.1-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-nodemon-0:1.8.1-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-normalize-path-0:2.0.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-normalize-path-0:2.0.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-object-assign-0:4.0.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-object-assign-0:4.0.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-object.omit-0:2.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-object.omit-0:2.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-optimist-0:0.4.0-5.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-optimist-0:0.4.0-5.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-os-homedir-0:1.0.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-os-homedir-0:1.0.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-os-tmpdir-0:1.0.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-os-tmpdir-0:1.0.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-osenv-0:0.1.0-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-osenv-0:0.1.0-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-package-json-0:2.3.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-package-json-0:2.3.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-parse-glob-0:3.0.4-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-parse-glob-0:3.0.4-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-parse-json-0:2.2.0-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-parse-json-0:2.2.0-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-pause-stream-0:0.0.11-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-pause-stream-0:0.0.11-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-pinkie-0:2.0.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-pinkie-0:2.0.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-pinkie-promise-0:2.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-pinkie-promise-0:2.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-prepend-http-0:1.0.1-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-prepend-http-0:1.0.1-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-preserve-0:0.2.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-preserve-0:0.2.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-ps-tree-0:1.0.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-ps-tree-0:1.0.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-randomatic-0:1.1.5-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-randomatic-0:1.1.5-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-rc-0:1.1.2-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-rc-0:1.1.2-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-read-all-stream-0:3.0.1-3.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-read-all-stream-0:3.0.1-3.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-readdirp-0:2.0.0-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-readdirp-0:2.0.0-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-regex-cache-0:0.4.2-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-regex-cache-0:0.4.2-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-registry-url-0:3.0.3-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-registry-url-0:3.0.3-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-repeat-element-0:1.1.2-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-repeat-element-0:1.1.2-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-semver-0:5.1.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-semver-0:5.1.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-semver-diff-0:2.1.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-semver-diff-0:2.1.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-slide-0:1.1.5-3.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-slide-0:1.1.5-3.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-split-0:0.3.3-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-split-0:0.3.3-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-stream-combiner-0:0.2.1-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-stream-combiner-0:0.2.1-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-string-length-0:1.0.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-string-length-0:1.0.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-strip-json-comments-0:1.0.2-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-strip-json-comments-0:1.0.2-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-success-symbol-0:0.1.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-success-symbol-0:0.1.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-through-0:2.3.4-4.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-through-0:2.3.4-4.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-timed-out-0:2.0.0-3.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-timed-out-0:2.0.0-3.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-touch-0:1.0.0-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-touch-0:1.0.0-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-undefsafe-0:0.0.3-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-undefsafe-0:0.0.3-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-unzip-response-0:1.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-unzip-response-0:1.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-update-notifier-0:0.6.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-update-notifier-0:0.6.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-url-parse-lax-0:1.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-url-parse-lax-0:1.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-uuid-0:2.0.1-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-uuid-0:2.0.1-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-write-file-atomic-0:1.1.2-2.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-write-file-atomic-0:1.1.2-2.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-xdg-basedir-0:2.0.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nodejs-xdg-basedir-0:2.0.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nss_wrapper-0:1.0.3-1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nss_wrapper-0:1.0.3-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:nss_wrapper-debuginfo-0:1.0.3-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:openshift-ansible-0:3.0.35-1.git.0.6a386dd.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:openshift-ansible-0:3.0.35-1.git.0.6a386dd.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:openshift-ansible-docs-0:3.0.35-1.git.0.6a386dd.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:openshift-ansible-filter-plugins-0:3.0.35-1.git.0.6a386dd.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:openshift-ansible-lookup-plugins-0:3.0.35-1.git.0.6a386dd.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:openshift-ansible-playbooks-0:3.0.35-1.git.0.6a386dd.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:openshift-ansible-roles-0:3.0.35-1.git.0.6a386dd.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:openvswitch-0:2.4.0-1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:openvswitch-0:2.4.0-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:openvswitch-debuginfo-0:2.4.0-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:openvswitch-devel-0:2.4.0-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:openvswitch-test-0:2.4.0-1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:origin-kibana-0:0.5.0-1.el7aos.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:origin-kibana-0:0.5.0-1.el7aos.src	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:python-openvswitch-0:2.4.0-1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RH7-RHOSE-3.1:tuned-profiles-atomic-openshift-node-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2014-1869

Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before 1.3.2, as maintained by Jon Rohan and James M. Greene, allow remote attackers to inject arbitrary web script or HTML via vectors related to certain SWF query parameters (aka loaderInfo.parameters).

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2014-3661

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service (thread consumption) via vectors related to a CLI handshake.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2014-3662

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2014-3663

Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:N/I:P/A:N

CWE-863 - Incorrect Authorization

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2014-3664

Directory traversal vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Overall/READ permission to read arbitrary files via unspecified vectors.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2014-3666

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Important

CVE-2014-3667

Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information by reading the plugin code.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-285 - Improper Authorization

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2014-3680

Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for the password field of a parameterized job by reading the DOM.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Important

CVE-2014-3681

Cross-site scripting (XSS) vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2015-1806

It was found that the combination filter Groovy script could allow a remote attacker to potentially execute arbitrary code on a Jenkins master.

6.5 ()


                
                  AV:N/AC:L/Au:S/C:P/I:P/A:P

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2015-1807

It was found that when building artifacts, the Jenkins server would follow symbolic links, potentially resulting in disclosure of information on the server.

4.0 ()


                
                  AV:N/AC:L/Au:S/C:P/I:N/A:N

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2015-1808

A denial of service flaw was found in the way Jenkins handled certain update center data. An authenticated user could provide specially crafted update center data to Jenkins, causing plug-in and tool installation to not work properly.

3.5 ()


                
                  AV:N/AC:M/Au:S/C:N/I:N/A:P

CWE-20 - Improper Input Validation

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2015-1810

It was discovered that the internal Jenkins user database did not restrict access to reserved names, allowing users to escalate privileges.

4.6 ()


                
                  AV:N/AC:H/Au:S/C:P/I:P/A:P

CWE-20 - Improper Input Validation

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2015-1812

Two cross-site scripting (XSS) flaws were found in Jenkins. A remote attacker could use these flaws to conduct XSS attacks against users of an application using Jenkins.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2015-1813

Two cross-site scripting (XSS) flaws were found in Jenkins. A remote attacker could use these flaws to conduct XSS attacks against users of an application using Jenkins.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2015-1814

A flaw was found in the Jenkins API token-issuing service. The service was not properly protected against anonymous users, potentially allowing remote attackers to escalate privileges.

7.5 ()


                
                  AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-284 - Improper Access Control

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Important

CVE-2015-5317

The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Low

CVE-2015-5318

Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible salt to generate CSRF protection tokens, which makes it easier for remote attackers to bypass the CSRF protection mechanism via a brute force attack.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-352 - Cross-Site Request Forgery (CSRF)

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2015-5319

XML external entity (XXE) vulnerability in the create-job CLI command in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to read arbitrary files via a crafted job configuration that is then used in an "XML-aware tool," as demonstrated by get-job and update-job.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:P/I:N/A:N

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Low

CVE-2015-5320

Jenkins before 1.638 and LTS before 1.625.2 do not properly verify the shared secret used in JNLP slave connections, which allows remote attackers to connect as slaves and obtain sensitive information or possibly gain administrative access by leveraging knowledge of the name of a slave.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Important

CVE-2015-5321

The sidepanel widgets in the CLI command overview and help pages in Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to the pages.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2015-5322

Directory traversal vulnerability in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to list directory contents and read arbitrary files in the Jenkins servlet resources via directory traversal sequences in a request to jnlpJars/.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:P/I:N/A:N

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Low

CVE-2015-5323

Jenkins before 1.638 and LTS before 1.625.2 do not properly restrict access to API tokens which might allow remote administrators to gain privileges and run scripts by using an API token of another user.

3.6 ()


                
                  AV:N/AC:H/Au:S/C:P/I:P/A:N

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2015-5324

Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to queue/api.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2015-5325

Jenkins before 1.638 and LTS before 1.625.2 allow attackers to bypass intended slave-to-master access restrictions by leveraging a JNLP slave. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3665.

4.9 ()


                
                  AV:N/AC:M/Au:S/C:P/I:P/A:N

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2015-5326

Cross-site scripting (XSS) vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message.

3.5 ()


                
                  AV:N/AC:M/Au:S/C:N/I:P/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Low

CVE-2015-7537

Cross-site request forgery (CSRF) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via vectors related to the HTTP GET method.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-352 - Cross-Site Request Forgery (CSRF)

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2015-7538

Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-352 - Cross-Site Request Forgery (CSRF)

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2015-7539

The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted plugin.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2015-8103

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-*.jar file and the "Groovy variant in 'ysoserial'".

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-502 - Deserialization of Untrusted Data

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Important

CVE-2016-1905

An authorization flaw was discovered in Kubernetes; the API server did not properly check user permissions when handling certain requests. An authenticated remote attacker could use this flaw to gain additional access to resources such as RAM and disk space.

4.0 ()


                
                  AV:N/AC:L/Au:S/C:N/I:P/A:N

CWE-285 - Improper Authorization

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

CVE-2016-1906

An authorization flaw was discovered in Kubernetes; the API server did not properly check user permissions when handling certain build-configuration strategies. A remote attacker could create build configurations with strategies that violate policy. Although the attacker could not launch the build themselves (launch fails when the policy is violated), if the build configuration files were later launched by other privileged services (such as automated triggers), user privileges could be bypassed allowing attacker escalation.

4.6 ()


                
                  AV:N/AC:H/Au:S/C:P/I:P/A:P

CWE-285 - Improper Authorization

Affected products

Fixed 254 products, the same list as for CVE-2013-2186

Threats

Impact Moderate

References

206 references

URL	Category
https://access.redhat.com/errata/RHSA-2016:0070	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=974814	external
https://bugzilla.redhat.com/show_bug.cgi?id=1063099	external
https://bugzilla.redhat.com/show_bug.cgi?id=1147758	external
https://bugzilla.redhat.com/show_bug.cgi?id=1147759	external
https://bugzilla.redhat.com/show_bug.cgi?id=1147764	external
https://bugzilla.redhat.com/show_bug.cgi?id=1147765	external
https://bugzilla.redhat.com/show_bug.cgi?id=1147766	external
https://bugzilla.redhat.com/show_bug.cgi?id=1147769	external
https://bugzilla.redhat.com/show_bug.cgi?id=1147770	external
https://bugzilla.redhat.com/show_bug.cgi?id=1148645	external
https://bugzilla.redhat.com/show_bug.cgi?id=1205615	external
https://bugzilla.redhat.com/show_bug.cgi?id=1205616	external
https://bugzilla.redhat.com/show_bug.cgi?id=1205620	external
https://bugzilla.redhat.com/show_bug.cgi?id=1205622	external
https://bugzilla.redhat.com/show_bug.cgi?id=1205623	external
https://bugzilla.redhat.com/show_bug.cgi?id=1205627	external
https://bugzilla.redhat.com/show_bug.cgi?id=1243514	external
https://bugzilla.redhat.com/show_bug.cgi?id=1247523	external
https://bugzilla.redhat.com/show_bug.cgi?id=1254880	external
https://bugzilla.redhat.com/show_bug.cgi?id=1256869	external
https://bugzilla.redhat.com/show_bug.cgi?id=1268478	external
https://bugzilla.redhat.com/show_bug.cgi?id=1273739	external
https://bugzilla.redhat.com/show_bug.cgi?id=1277329	external
https://bugzilla.redhat.com/show_bug.cgi?id=1277383	external
https://bugzilla.redhat.com/show_bug.cgi?id=1277608	external
https://bugzilla.redhat.com/show_bug.cgi?id=1278232	external
https://bugzilla.redhat.com/show_bug.cgi?id=1278630	external
https://bugzilla.redhat.com/show_bug.cgi?id=1279404	external
https://bugzilla.redhat.com/show_bug.cgi?id=1279744	external
https://bugzilla.redhat.com/show_bug.cgi?id=1279925	external
https://bugzilla.redhat.com/show_bug.cgi?id=1280216	external
https://bugzilla.redhat.com/show_bug.cgi?id=1280497	external
https://bugzilla.redhat.com/show_bug.cgi?id=1282359	external
https://bugzilla.redhat.com/show_bug.cgi?id=1282361	external
https://bugzilla.redhat.com/show_bug.cgi?id=1282362	external
https://bugzilla.redhat.com/show_bug.cgi?id=1282363	external
https://bugzilla.redhat.com/show_bug.cgi?id=1282364	external
https://bugzilla.redhat.com/show_bug.cgi?id=1282365	external
https://bugzilla.redhat.com/show_bug.cgi?id=1282366	external
https://bugzilla.redhat.com/show_bug.cgi?id=1282367	external
https://bugzilla.redhat.com/show_bug.cgi?id=1282368	external
https://bugzilla.redhat.com/show_bug.cgi?id=1282369	external
https://bugzilla.redhat.com/show_bug.cgi?id=1282371	external
https://bugzilla.redhat.com/show_bug.cgi?id=1282426	external
https://bugzilla.redhat.com/show_bug.cgi?id=1282738	external
https://bugzilla.redhat.com/show_bug.cgi?id=1283952	external
https://bugzilla.redhat.com/show_bug.cgi?id=1284506	external
https://bugzilla.redhat.com/show_bug.cgi?id=1287414	external
https://bugzilla.redhat.com/show_bug.cgi?id=1287943	external
https://bugzilla.redhat.com/show_bug.cgi?id=1288014	external
https://bugzilla.redhat.com/show_bug.cgi?id=1289603	external
https://bugzilla.redhat.com/show_bug.cgi?id=1289965	external
https://bugzilla.redhat.com/show_bug.cgi?id=1290643	external
https://bugzilla.redhat.com/show_bug.cgi?id=1290967	external
https://bugzilla.redhat.com/show_bug.cgi?id=1291795	external
https://bugzilla.redhat.com/show_bug.cgi?id=1291797	external
https://bugzilla.redhat.com/show_bug.cgi?id=1291798	external
https://bugzilla.redhat.com/show_bug.cgi?id=1292621	external
https://bugzilla.redhat.com/show_bug.cgi?id=1293251	external
https://bugzilla.redhat.com/show_bug.cgi?id=1293252	external
https://bugzilla.redhat.com/show_bug.cgi?id=1293829	external
https://bugzilla.redhat.com/show_bug.cgi?id=1293877	external
https://bugzilla.redhat.com/show_bug.cgi?id=1294115	external
https://bugzilla.redhat.com/show_bug.cgi?id=1294798	external
https://bugzilla.redhat.com/show_bug.cgi?id=1296457	external
https://bugzilla.redhat.com/show_bug.cgi?id=1297910	external
https://bugzilla.redhat.com/show_bug.cgi?id=1297916	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2013-2186	self
https://bugzilla.redhat.com/show_bug.cgi?id=974814	external
https://www.cve.org/CVERecord?id=CVE-2013-2186	external
https://nvd.nist.gov/vuln/detail/CVE-2013-2186	external
https://access.redhat.com/security/cve/CVE-2014-1869	self
https://bugzilla.redhat.com/show_bug.cgi?id=1063099	external
https://www.cve.org/CVERecord?id=CVE-2014-1869	external
https://nvd.nist.gov/vuln/detail/CVE-2014-1869	external
https://access.redhat.com/security/cve/CVE-2014-3661	self
https://bugzilla.redhat.com/show_bug.cgi?id=1147758	external
https://www.cve.org/CVERecord?id=CVE-2014-3661	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3661	external
https://access.redhat.com/security/cve/CVE-2014-3662	self
https://bugzilla.redhat.com/show_bug.cgi?id=1147759	external
https://www.cve.org/CVERecord?id=CVE-2014-3662	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3662	external
https://access.redhat.com/security/cve/CVE-2014-3663	self
https://bugzilla.redhat.com/show_bug.cgi?id=1147764	external
https://www.cve.org/CVERecord?id=CVE-2014-3663	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3663	external
https://access.redhat.com/security/cve/CVE-2014-3664	self
https://bugzilla.redhat.com/show_bug.cgi?id=1147765	external
https://www.cve.org/CVERecord?id=CVE-2014-3664	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3664	external
https://access.redhat.com/security/cve/CVE-2014-3666	self
https://bugzilla.redhat.com/show_bug.cgi?id=1147769	external
https://www.cve.org/CVERecord?id=CVE-2014-3666	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3666	external
https://access.redhat.com/security/cve/CVE-2014-3667	self
https://bugzilla.redhat.com/show_bug.cgi?id=1147770	external
https://www.cve.org/CVERecord?id=CVE-2014-3667	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3667	external
https://access.redhat.com/security/cve/CVE-2014-3680	self
https://bugzilla.redhat.com/show_bug.cgi?id=1148645	external
https://www.cve.org/CVERecord?id=CVE-2014-3680	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3680	external
https://access.redhat.com/security/cve/CVE-2014-3681	self
https://bugzilla.redhat.com/show_bug.cgi?id=1147766	external
https://www.cve.org/CVERecord?id=CVE-2014-3681	external
https://nvd.nist.gov/vuln/detail/CVE-2014-3681	external
https://access.redhat.com/security/cve/CVE-2015-1806	self
https://bugzilla.redhat.com/show_bug.cgi?id=1205620	external
https://www.cve.org/CVERecord?id=CVE-2015-1806	external
https://nvd.nist.gov/vuln/detail/CVE-2015-1806	external
https://wiki.jenkins-ci.org/display/SECURITY/Jenk…	external
https://access.redhat.com/security/cve/CVE-2015-1807	self
https://bugzilla.redhat.com/show_bug.cgi?id=1205622	external
https://www.cve.org/CVERecord?id=CVE-2015-1807	external
https://nvd.nist.gov/vuln/detail/CVE-2015-1807	external
https://access.redhat.com/security/cve/CVE-2015-1808	self
https://bugzilla.redhat.com/show_bug.cgi?id=1205623	external
https://www.cve.org/CVERecord?id=CVE-2015-1808	external
https://nvd.nist.gov/vuln/detail/CVE-2015-1808	external
https://access.redhat.com/security/cve/CVE-2015-1810	self
https://bugzilla.redhat.com/show_bug.cgi?id=1205627	external
https://www.cve.org/CVERecord?id=CVE-2015-1810	external
https://nvd.nist.gov/vuln/detail/CVE-2015-1810	external
https://access.redhat.com/security/cve/CVE-2015-1812	self
https://bugzilla.redhat.com/show_bug.cgi?id=1205615	external
https://www.cve.org/CVERecord?id=CVE-2015-1812	external
https://nvd.nist.gov/vuln/detail/CVE-2015-1812	external
https://wiki.jenkins-ci.org/display/SECURITY/Jenk…	external
https://access.redhat.com/security/cve/CVE-2015-1813	self
https://www.cve.org/CVERecord?id=CVE-2015-1813	external
https://nvd.nist.gov/vuln/detail/CVE-2015-1813	external
https://access.redhat.com/security/cve/CVE-2015-1814	self
https://bugzilla.redhat.com/show_bug.cgi?id=1205616	external
https://www.cve.org/CVERecord?id=CVE-2015-1814	external
https://nvd.nist.gov/vuln/detail/CVE-2015-1814	external
https://access.redhat.com/security/cve/CVE-2015-5317	self
https://bugzilla.redhat.com/show_bug.cgi?id=1282359	external
https://www.cve.org/CVERecord?id=CVE-2015-5317	external
https://nvd.nist.gov/vuln/detail/CVE-2015-5317	external
https://wiki.jenkins-ci.org/display/SECURITY/Jenk…	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external
https://access.redhat.com/security/cve/CVE-2015-5318	self
https://bugzilla.redhat.com/show_bug.cgi?id=1282361	external
https://www.cve.org/CVERecord?id=CVE-2015-5318	external
https://nvd.nist.gov/vuln/detail/CVE-2015-5318	external
https://access.redhat.com/security/cve/CVE-2015-5319	self
https://bugzilla.redhat.com/show_bug.cgi?id=1282362	external
https://www.cve.org/CVERecord?id=CVE-2015-5319	external
https://nvd.nist.gov/vuln/detail/CVE-2015-5319	external
https://access.redhat.com/security/cve/CVE-2015-5320	self
https://bugzilla.redhat.com/show_bug.cgi?id=1282363	external
https://www.cve.org/CVERecord?id=CVE-2015-5320	external
https://nvd.nist.gov/vuln/detail/CVE-2015-5320	external
https://access.redhat.com/security/cve/CVE-2015-5321	self
https://bugzilla.redhat.com/show_bug.cgi?id=1282364	external
https://www.cve.org/CVERecord?id=CVE-2015-5321	external
https://nvd.nist.gov/vuln/detail/CVE-2015-5321	external
https://access.redhat.com/security/cve/CVE-2015-5322	self
https://bugzilla.redhat.com/show_bug.cgi?id=1282365	external
https://www.cve.org/CVERecord?id=CVE-2015-5322	external
https://nvd.nist.gov/vuln/detail/CVE-2015-5322	external
https://access.redhat.com/security/cve/CVE-2015-5323	self
https://bugzilla.redhat.com/show_bug.cgi?id=1282366	external
https://www.cve.org/CVERecord?id=CVE-2015-5323	external
https://nvd.nist.gov/vuln/detail/CVE-2015-5323	external
https://access.redhat.com/security/cve/CVE-2015-5324	self
https://bugzilla.redhat.com/show_bug.cgi?id=1282367	external
https://www.cve.org/CVERecord?id=CVE-2015-5324	external
https://nvd.nist.gov/vuln/detail/CVE-2015-5324	external
https://access.redhat.com/security/cve/CVE-2015-5325	self
https://bugzilla.redhat.com/show_bug.cgi?id=1282368	external
https://www.cve.org/CVERecord?id=CVE-2015-5325	external
https://nvd.nist.gov/vuln/detail/CVE-2015-5325	external
https://access.redhat.com/security/cve/CVE-2015-5326	self
https://bugzilla.redhat.com/show_bug.cgi?id=1282369	external
https://www.cve.org/CVERecord?id=CVE-2015-5326	external
https://nvd.nist.gov/vuln/detail/CVE-2015-5326	external
https://access.redhat.com/security/cve/CVE-2015-7537	self
https://bugzilla.redhat.com/show_bug.cgi?id=1291795	external
https://www.cve.org/CVERecord?id=CVE-2015-7537	external
https://nvd.nist.gov/vuln/detail/CVE-2015-7537	external
https://wiki.jenkins-ci.org/display/SECURITY/Jenk…	external
https://access.redhat.com/security/cve/CVE-2015-7538	self
https://bugzilla.redhat.com/show_bug.cgi?id=1291797	external
https://www.cve.org/CVERecord?id=CVE-2015-7538	external
https://nvd.nist.gov/vuln/detail/CVE-2015-7538	external
https://access.redhat.com/security/cve/CVE-2015-7539	self
https://bugzilla.redhat.com/show_bug.cgi?id=1291798	external
https://www.cve.org/CVERecord?id=CVE-2015-7539	external
https://nvd.nist.gov/vuln/detail/CVE-2015-7539	external
https://access.redhat.com/security/cve/CVE-2015-8103	self
https://bugzilla.redhat.com/show_bug.cgi?id=1282371	external
https://www.cve.org/CVERecord?id=CVE-2015-8103	external
https://nvd.nist.gov/vuln/detail/CVE-2015-8103	external
https://access.redhat.com/security/cve/CVE-2016-1905	self
https://bugzilla.redhat.com/show_bug.cgi?id=1297910	external
https://www.cve.org/CVERecord?id=CVE-2016-1905	external
https://nvd.nist.gov/vuln/detail/CVE-2016-1905	external
https://access.redhat.com/security/cve/CVE-2016-1906	self
https://bugzilla.redhat.com/show_bug.cgi?id=1297916	external
https://www.cve.org/CVERecord?id=CVE-2016-1906	external
https://nvd.nist.gov/vuln/detail/CVE-2016-1906	external

Acknowledgments

Jenkins project

Daniel Beck

Jesse Glick

Stephen Connolly

Matthias Schmalz

Seth Graham

JSON

To clipboard

Loading 2.3 MB of JSON…

BDU:2016-00543 (CVE-2016-1906)

Vulnerability from fstec – Published: 2016-03-11 – Updated: 2021-03-23 – View on bdu.fstec.ru Fixed

Title

Уязвимость программного средства управления кластерами виртуальных машин Kubernetes, позволяющая нарушителю повысить свои привилегии

Summary

Уязвимость программного интерфейса сервера программного средства управления кластерами виртуальных машин Kubernetes связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, повысить свои привилегии путём редактирования конфигурации во время сборки системы

Severity

10.0 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:C/I:C/A:C

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Being clarified

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-264 - Разрешения, привилегии и средства управления доступом

Aliases

CVE-2016-1906, RHSA-2016:0070

References

2 references

URL
https://github.com/openshift/origin/issues/6556
https://access.redhat.com/errata/RHSA-2016:0070

Impacted products

1 product from 1 vendor

Vendors

Google Inc

Products

Kubernetes

Versions

. (Kubernetes)

Product types

AI development software

Platforms

Сообщество свободного программного обеспечения Linux . 64-bit, Microsoft Corp Windows - 64-bit, Apple Inc. MacOS 10 64-bit

Mitigations

Обновление программного обеспечения до более новой версии

Credits

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Google Inc",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": ". (Kubernetes)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "03.02.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.03.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "11.03.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2016-00543",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2016-1906, RHSA-2016:0070",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Kubernetes",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . 64-bit, Microsoft Corp Windows - 64-bit, Apple Inc. MacOS 10 64-bit",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430\u043c\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d Kubernetes, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0420\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c (CWE-264)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430\u043c\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d Kubernetes \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u0443\u0442\u0451\u043c \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "-",
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://github.com/openshift/origin/issues/6556\nhttps://access.redhat.com/errata/RHSA-2016:0070",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0418\u0418",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-264",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)"
}

BDU:2016-00544 (CVE-2016-1905)

Vulnerability from fstec – Published: 2016-03-11 – Updated: 2021-03-23 – View on bdu.fstec.ru Fixed

Title

Уязвимость программного средства управления кластерами виртуальных машин Kubernetes, позволяющая нарушителю получить доступ к защищаемой информации

Summary

Уязвимость программного интерфейса сервера программного средства управления кластерами виртуальных машин Kubernetes связана с недостатками контроля доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить доступ к защищаемой информации при помощи специально созданного патча

Severity

4.0 (Medium) CVSS 2.0


                      
                        AV:N/AC:L/Au:S/C:N/I:P/A:N

Class

Architecture vulnerability

Status

Confirmed by the vendor

Exploitation

Being clarified

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-284 - Неправильный контроль доступа

Aliases

CVE-2016-1905, RHSA-2016:0070

References

2 references

URL
https://github.com/kubernetes/kubernetes/issues/19479
https://access.redhat.com/errata/RHSA-2016:0070

Impacted products

1 product from 1 vendor

Vendors

Google Inc

Products

Kubernetes

Versions

. (Kubernetes)

Product types

AI development software

Platforms

Сообщество свободного программного обеспечения Linux . 64-bit, Microsoft Corp Windows - 64-bit, Apple Inc. MacOS 10 64-bit

Mitigations

Обновление программного обеспечения до более новой версии

Credits

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Google Inc",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": ". (Kubernetes)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "03.02.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.03.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "11.03.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2016-00544",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2016-1905, RHSA-2016:0070",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Kubernetes",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . 64-bit, Microsoft Corp Windows - 64-bit, Apple Inc. MacOS 10 64-bit",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430\u043c\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d Kubernetes, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (CWE-284)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430\u043c\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d Kubernetes \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "-",
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://github.com/kubernetes/kubernetes/issues/19479\nhttps://access.redhat.com/errata/RHSA-2016:0070",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0418\u0418",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-284",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4)"
}

CVE-2013-2186 (GCVE-0-2013-2186)

Vulnerability from cvelistv5 – Published: 2013-10-28 21:00 – Updated: 2024-08-06 15:27

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

19 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2013-1430.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2013-1429.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://lists.opensuse.org/opensuse-updates/2013-1…	vendor-advisoryx_refsource_SUSE
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://secunia.com/advisories/55716	third-party-advisoryx_refsource_SECUNIA
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2013-1…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2013-1428.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2013/dsa-2827	vendor-advisoryx_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2016:0070	vendor-advisoryx_refsource_REDHAT
https://wiki.jenkins-ci.org/display/SECURITY/Jenk…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2013-1442.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2013-1448.html	vendor-advisoryx_refsource_REDHAT
https://www.tenable.com/security/research/tra-2016-23	x_refsource_MISC
http://www.securityfocus.com/bid/63174	vdb-entryx_refsource_BID
http://ubuntu.com/usn/usn-2029-1	vendor-advisoryx_refsource_UBUNTU

Date Public

2013-10-15 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:27:40.996Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1430.html"
          },
          {
            "name": "RHSA-2013:1429",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1429.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "apache-commons-cve20132186-file-overrwite(88133)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/88133"
          },
          {
            "name": "openSUSE-SU-2013:1571",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-10/msg00033.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html"
          },
          {
            "name": "55716",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55716"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
          },
          {
            "name": "openSUSE-SU-2013:1596",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-10/msg00050.html"
          },
          {
            "name": "SUSE-SU-2013:1660",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00008.html"
          },
          {
            "name": "RHSA-2013:1428",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1428.html"
          },
          {
            "name": "DSA-2827",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2013/dsa-2827"
          },
          {
            "name": "RHSA-2016:0070",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:0070"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"
          },
          {
            "name": "RHSA-2013:1442",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1442.html"
          },
          {
            "name": "RHSA-2013:1448",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1448.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/research/tra-2016-23"
          },
          {
            "name": "63174",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/63174"
          },
          {
            "name": "USN-2029-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-2029-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-10-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-08T21:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2013:1430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1430.html"
        },
        {
          "name": "RHSA-2013:1429",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1429.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "apache-commons-cve20132186-file-overrwite(88133)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/88133"
        },
        {
          "name": "openSUSE-SU-2013:1571",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-10/msg00033.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html"
        },
        {
          "name": "55716",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55716"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
        },
        {
          "name": "openSUSE-SU-2013:1596",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-10/msg00050.html"
        },
        {
          "name": "SUSE-SU-2013:1660",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00008.html"
        },
        {
          "name": "RHSA-2013:1428",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1428.html"
        },
        {
          "name": "DSA-2827",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2013/dsa-2827"
        },
        {
          "name": "RHSA-2016:0070",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:0070"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"
        },
        {
          "name": "RHSA-2013:1442",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1442.html"
        },
        {
          "name": "RHSA-2013:1448",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1448.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.tenable.com/security/research/tra-2016-23"
        },
        {
          "name": "63174",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/63174"
        },
        {
          "name": "USN-2029-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-2029-1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2013-2186",
    "datePublished": "2013-10-28T21:00:00.000Z",
    "dateReserved": "2013-02-19T00:00:00.000Z",
    "dateUpdated": "2024-08-06T15:27:40.996Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-1869 (GCVE-0-2014-1869)

Vulnerability from cvelistv5 – Published: 2014-02-08 00:00 – Updated: 2024-08-06 09:58

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
https://github.com/zeroclipboard/zeroclipboard/pull/335	x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/56821	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/65484	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2016:0070	vendor-advisoryx_refsource_REDHAT
https://wiki.jenkins-ci.org/display/SECURITY/Jenk…	x_refsource_CONFIRM
https://github.com/zeroclipboard/zeroclipboard/re…	x_refsource_CONFIRM
https://github.com/zeroclipboard/zeroclipboard/co…	x_refsource_MISC

Date Public

2014-01-31 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:58:15.417Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/zeroclipboard/zeroclipboard/pull/335"
          },
          {
            "name": "zeroclipboard-cve20141869-xss(91085)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/91085"
          },
          {
            "name": "56821",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56821"
          },
          {
            "name": "65484",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/65484"
          },
          {
            "name": "RHSA-2016:0070",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:0070"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/zeroclipboard/zeroclipboard/releases/tag/v1.3.2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/zeroclipboard/zeroclipboard/commit/2f9eb9750a433965572d047e24b0fc78fd1415ca"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before 1.3.2, as maintained by Jon Rohan and James M. Greene, allow remote attackers to inject arbitrary web script or HTML via vectors related to certain SWF query parameters (aka loaderInfo.parameters)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/zeroclipboard/zeroclipboard/pull/335"
        },
        {
          "name": "zeroclipboard-cve20141869-xss(91085)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/91085"
        },
        {
          "name": "56821",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56821"
        },
        {
          "name": "65484",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/65484"
        },
        {
          "name": "RHSA-2016:0070",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:0070"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/zeroclipboard/zeroclipboard/releases/tag/v1.3.2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/zeroclipboard/zeroclipboard/commit/2f9eb9750a433965572d047e24b0fc78fd1415ca"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-1869",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before 1.3.2, as maintained by Jon Rohan and James M. Greene, allow remote attackers to inject arbitrary web script or HTML via vectors related to certain SWF query parameters (aka loaderInfo.parameters)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/zeroclipboard/zeroclipboard/pull/335",
              "refsource": "CONFIRM",
              "url": "https://github.com/zeroclipboard/zeroclipboard/pull/335"
            },
            {
              "name": "zeroclipboard-cve20141869-xss(91085)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/91085"
            },
            {
              "name": "56821",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56821"
            },
            {
              "name": "65484",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/65484"
            },
            {
              "name": "RHSA-2016:0070",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:0070"
            },
            {
              "name": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01",
              "refsource": "CONFIRM",
              "url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"
            },
            {
              "name": "https://github.com/zeroclipboard/zeroclipboard/releases/tag/v1.3.2",
              "refsource": "CONFIRM",
              "url": "https://github.com/zeroclipboard/zeroclipboard/releases/tag/v1.3.2"
            },
            {
              "name": "https://github.com/zeroclipboard/zeroclipboard/commit/2f9eb9750a433965572d047e24b0fc78fd1415ca",
              "refsource": "MISC",
              "url": "https://github.com/zeroclipboard/zeroclipboard/commit/2f9eb9750a433965572d047e24b0fc78fd1415ca"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-1869",
    "datePublished": "2014-02-08T00:00:00.000Z",
    "dateReserved": "2014-02-06T00:00:00.000Z",
    "dateUpdated": "2024-08-06T09:58:15.417Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3661 (GCVE-0-2014-3661)

Vulnerability from cvelistv5 – Published: 2014-10-16 19:00 – Updated: 2024-08-06 10:50

Summary

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service (thread consumption) via vectors related to a CLI handshake.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

2 references

URL	Tags
https://access.redhat.com/errata/RHSA-2016:0070	vendor-advisoryx_refsource_REDHAT
https://wiki.jenkins-ci.org/display/SECURITY/Jenk…	x_refsource_CONFIRM

Date Public

2014-10-10 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:18.247Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:0070",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:0070"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-10-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service (thread consumption) via vectors related to a CLI handshake."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-06-09T15:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2016:0070",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:0070"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3661",
    "datePublished": "2014-10-16T19:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:18.247Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3662 (GCVE-0-2014-3662)

Vulnerability from cvelistv5 – Published: 2014-10-16 19:00 – Updated: 2024-08-06 10:50

Summary

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

2 references

URL	Tags
https://access.redhat.com/errata/RHSA-2016:0070	vendor-advisoryx_refsource_REDHAT
https://wiki.jenkins-ci.org/display/SECURITY/Jenk…	x_refsource_CONFIRM

Date Public

2014-10-10 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:18.267Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:0070",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:0070"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-10-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-06-09T15:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2016:0070",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:0070"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3662",
    "datePublished": "2014-10-16T19:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:18.267Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3663 (GCVE-0-2014-3663)

Vulnerability from cvelistv5 – Published: 2014-10-16 19:00 – Updated: 2024-08-06 10:50

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

2 references

URL	Tags
https://access.redhat.com/errata/RHSA-2016:0070	vendor-advisoryx_refsource_REDHAT
https://wiki.jenkins-ci.org/display/SECURITY/Jenk…	x_refsource_CONFIRM

Date Public

2014-10-10 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:18.207Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:0070",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:0070"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-10-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-06-09T15:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2016:0070",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:0070"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3663",
    "datePublished": "2014-10-16T19:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:18.207Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3664 (GCVE-0-2014-3664)

Vulnerability from cvelistv5 – Published: 2014-10-15 14:00 – Updated: 2024-08-06 10:50

Summary

Directory traversal vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Overall/READ permission to read arbitrary files via unspecified vectors.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

4 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1147765	x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
https://access.redhat.com/errata/RHSA-2016:0070	vendor-advisoryx_refsource_REDHAT
https://wiki.jenkins-ci.org/display/SECURITY/Jenk…	x_refsource_CONFIRM

Date Public

2014-10-01 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:17.939Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1147765"
          },
          {
            "name": "jenkins-cve20143664-dir-traversal(96973)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96973"
          },
          {
            "name": "RHSA-2016:0070",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:0070"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-10-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Directory traversal vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Overall/READ permission to read arbitrary files via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-28T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1147765"
        },
        {
          "name": "jenkins-cve20143664-dir-traversal(96973)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96973"
        },
        {
          "name": "RHSA-2016:0070",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:0070"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3664",
    "datePublished": "2014-10-15T14:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:17.939Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3666 (GCVE-0-2014-3666)

Vulnerability from cvelistv5 – Published: 2014-10-16 19:00 – Updated: 2024-08-06 10:50

Summary

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

2 references

URL	Tags
https://access.redhat.com/errata/RHSA-2016:0070	vendor-advisoryx_refsource_REDHAT
https://wiki.jenkins-ci.org/display/SECURITY/Jenk…	x_refsource_CONFIRM

Date Public

2014-10-10 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:17.969Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:0070",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:0070"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-10-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-06-09T16:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2016:0070",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:0070"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3666",
    "datePublished": "2014-10-16T19:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:17.969Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-3667 (GCVE-0-2014-3667)

Vulnerability from cvelistv5 – Published: 2014-10-16 19:00 – Updated: 2024-08-06 10:50

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

2 references

URL	Tags
https://access.redhat.com/errata/RHSA-2016:0070	vendor-advisoryx_refsource_REDHAT
https://wiki.jenkins-ci.org/display/SECURITY/Jenk…	x_refsource_CONFIRM

Date Public

2014-10-10 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:18.215Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:0070",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:0070"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-10-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information by reading the plugin code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-06-09T16:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2016:0070",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:0070"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3667",
    "datePublished": "2014-10-16T19:00:00.000Z",
    "dateReserved": "2014-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:50:18.215Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2016:0070

BDU:2016-00543 (CVE-2016-1906)

BDU:2016-00544 (CVE-2016-1905)

CVE-2013-2186 (GCVE-0-2013-2186)

CVE-2014-1869 (GCVE-0-2014-1869)

CVE-2014-3661 (GCVE-0-2014-3661)

CVE-2014-3662 (GCVE-0-2014-3662)

CVE-2014-3663 (GCVE-0-2014-3663)

CVE-2014-3664 (GCVE-0-2014-3664)

CVE-2014-3666 (GCVE-0-2014-3666)

CVE-2014-3667 (GCVE-0-2014-3667)

Tags

Sightings

Nomenclature

Related by attack behaviour