CVE-2015-5320

15

FAUCET Score

CVE-2015-5320 describes a vulnerability in Jenkins versions prior to 1.638 and LTS before 1.625.2, where the shared secret for JNLP slave connections is not properly verified, affecting Jenkins, OpenShift, and Red Hat products. This allows unauthenticated remote attackers to connect as slaves by knowing a slave's name, potentially leading to sensitive information disclosure or administrative access. The vulnerability has a CVSS score of 5.0 (medium severity) with a low attack complexity and no authentication required, but it is not known to be actively exploited, lacks public exploit code, and has received minimal community discussion or media coverage.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		<= 3.1CPE matchmatch criteria	cpe:2.3:a:redhat:openshift:::::enterprise:::*
		<= 1.637CPE matchmatch criteria	cpe:2.3:a:jenkins:jenkins::::::::
		<= 1.625.1CPE matchmatch criteria	cpe:2.3:a:jenkins:jenkins:::::lts:::*
		2.0CPE matchmatch criteria	cpe:2.3:a:redhat:openshift:2.0:::::::*

CVSS Data

CVSS version used by this source: 2.0

5.0MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Exploitability Score

10.0

Impact Score

2.9

CvssVersion

2.0

Exploit Intelligence

EPSS Score

2.08%

Probability of exploitation in next 30 days

EPSS Percentile

79.6%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0208 is in the 68th percentile among its peer group of 23,723 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (138)

mavenpatch availablevia ghsa

Product: org.jenkins-ci.main:jenkins-coreFixed in: 1.638

mavenpatch availablevia ghsa

Product: org.jenkins-ci.main:jenkins-coreFixed in: 1.625.2

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: activemq-0:5.9.0-6.redhat.611454.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: jenkins-0:1.625.3-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-enterprise-upgrade-0:2.2.9-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-broker-util-0:1.37.5.3-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-cron-0:1.25.2.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-haproxy-0:1.31.5.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-mysql-0:1.31.2.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-php-0:1.35.3.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-python-0:1.34.2.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-msg-node-mcollective-0:1.30.2.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-node-proxy-0:1.26.2.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-node-util-0:1.38.6.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: php-0:5.3.3-46.el6_7.1

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rhc-0:1.38.6.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rubygem-openshift-origin-common-0:1.29.5.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rubygem-openshift-origin-console-0:1.35.5.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rubygem-openshift-origin-controller-0:1.38.5.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rubygem-openshift-origin-frontend-apache-vhost-0:0.13.2.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rubygem-openshift-origin-node-0:1.38.5.3-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: atomic-openshift-0:3.1.1.6-1.git.0.b57e8bd.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: heapster-0:0.18.2-3.gitaf4752e.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: jenkins-0:1.625.3-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-align-text-0:0.1.3-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-ansi-green-0:0.1.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-ansi-wrap-0:0.1.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-anymatch-0:1.3.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-array-unique-0:0.2.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-arr-diff-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-arr-flatten-0:1.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-arrify-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-async-each-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-binary-extensions-0:1.3.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-braces-0:1.8.2-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-capture-stack-trace-0:1.0.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-chokidar-0:1.4.1-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-configstore-0:1.4.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-create-error-class-0:2.0.1-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-deep-extend-0:0.3.2-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-duplexer-0:0.1.1-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-duplexify-0:3.4.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-end-of-stream-0:1.1.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-error-ex-0:1.2.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-es6-promise-0:3.0.2-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-event-stream-0:3.3.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-expand-brackets-0:0.1.4-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-expand-range-0:1.8.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-extglob-0:0.3.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-filename-regex-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-fill-range-0:2.2.3-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-for-in-0:0.1.4-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-for-own-0:0.1.3-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-from-0:0.1.3-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-glob-base-0:0.3.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-glob-parent-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-got-0:5.2.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-graceful-fs-0:4.1.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-ini-0:1.1.0-6.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-binary-path-0:1.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-dotfile-0:1.0.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-equal-shallow-0:0.1.3-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-extendable-0:0.1.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-extglob-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-glob-0:2.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-npm-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-number-0:2.1.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-isobject-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-plain-obj-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-primitive-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-redirect-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-stream-0:1.0.1-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-kind-of-0:3.0.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-latest-version-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lazy-cache-0:1.0.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.assign-0:3.2.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.baseassign-0:3.2.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.basecopy-0:3.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.bindcallback-0:3.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.createassigner-0:3.1.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.defaults-0:3.1.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.getnative-0:3.9.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.isarguments-0:3.0.4-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.isarray-0:3.0.4-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.isiterateecall-0:3.0.9-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.keys-0:3.1.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.restparam-0:3.6.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lowercase-keys-0:1.0.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-map-stream-0:0.1.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-micromatch-0:2.3.5-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-mkdirp-0:0.5.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-nodemon-0:1.8.1-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-node-status-codes-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-normalize-path-0:2.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-object-assign-0:4.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-object.omit-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-optimist-0:0.4.0-5.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-osenv-0:0.1.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-os-homedir-0:1.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-os-tmpdir-0:1.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-package-json-0:2.3.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-parse-glob-0:3.0.4-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-parse-json-0:2.2.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-pause-stream-0:0.0.11-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-pinkie-0:2.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-pinkie-promise-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-prepend-http-0:1.0.1-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-preserve-0:0.2.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-ps-tree-0:1.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-randomatic-0:1.1.5-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-rc-0:1.1.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-read-all-stream-0:3.0.1-3.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-readdirp-0:2.0.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-regex-cache-0:0.4.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-registry-url-0:3.0.3-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-repeat-element-0:1.1.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-semver-0:5.1.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-semver-diff-0:2.1.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-slide-0:1.1.5-3.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-split-0:0.3.3-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-stream-combiner-0:0.2.1-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-string-length-0:1.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-strip-json-comments-0:1.0.2-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-success-symbol-0:0.1.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-through-0:2.3.4-4.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-timed-out-0:2.0.0-3.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-touch-0:1.0.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-undefsafe-0:0.0.3-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-unzip-response-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-update-notifier-0:0.6.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-url-parse-lax-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-uuid-0:2.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-write-file-atomic-0:1.1.2-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-xdg-basedir-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nss_wrapper-0:1.0.3-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: openshift-ansible-0:3.0.35-1.git.0.6a386dd.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: openvswitch-0:2.4.0-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: origin-kibana-0:0.5.0-1.el7aos

Vendor Advisories (2)

mavenGHSA-449q-v4j2-5h8pmedium

Jenkins allows Exposure of Sensitive Information to an Unauthorized Actor

redhatCVE-2015-5320Important

jenkins: Secret key not verified when connecting a slave (SECURITY-184)

References

rhn.redhat.com / errata/RHSA-2016-0489.html

access.redhat.com / errata/RHSA-2016:0070

wiki.jenkins-ci.org / display/SECURITY/Jenkins+Security+Advisory+2015-11-11

Vendor Advisory