CVE-2015-5325

20

FAUCET Score

CVE-2015-5325 is a bypass vulnerability affecting Jenkins versions prior to 1.638 and LTS before 1.625.2, specifically impacting JNLP slave-to-master access restrictions. This vulnerability, a partial fix for CVE-2014-3665, carries a CVSS score of 7.5, indicating a high severity with network-based attacks, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage has been observed, organizations using affected Jenkins versions should prioritize patching.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		<= 3.1CPE matchmatch criteria	cpe:2.3:a:redhat:openshift:::::enterprise:::*
		2.0CPE matchmatch criteria	cpe:2.3:a:redhat:openshift:2.0:::::::*
		<= 1.625.1CPE matchmatch criteria	cpe:2.3:a:jenkins:jenkins:::::lts:::*
		<= 1.637CPE matchmatch criteria	cpe:2.3:a:jenkins:jenkins::::::::

CVSS Data

CVSS version used by this source: 2.0

7.5HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Exploitability Score

10.0

Impact Score

6.4

CvssVersion

2.0

Exploit Intelligence

EPSS Score

1.79%

Probability of exploitation in next 30 days

EPSS Percentile

76.1%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

This CVE's current EPSS score of 0.0179 is in the 59th percentile among its peer group of 51,553 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (138)

mavenpatch availablevia ghsa

Product: org.jenkins-ci.main:jenkins-coreFixed in: 1.625.2

mavenpatch availablevia ghsa

Product: org.jenkins-ci.main:jenkins-coreFixed in: 1.638

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: activemq-0:5.9.0-6.redhat.611454.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: jenkins-0:1.625.3-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-enterprise-upgrade-0:2.2.9-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-broker-util-0:1.37.5.3-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-cron-0:1.25.2.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-haproxy-0:1.31.5.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-mysql-0:1.31.2.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-php-0:1.35.3.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-cartridge-python-0:1.34.2.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-msg-node-mcollective-0:1.30.2.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-node-proxy-0:1.26.2.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: openshift-origin-node-util-0:1.38.6.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: php-0:5.3.3-46.el6_7.1

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rhc-0:1.38.6.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rubygem-openshift-origin-common-0:1.29.5.2-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rubygem-openshift-origin-console-0:1.35.5.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rubygem-openshift-origin-controller-0:1.38.5.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rubygem-openshift-origin-frontend-apache-vhost-0:0.13.2.1-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 2.2Fixed in: rubygem-openshift-origin-node-0:1.38.5.3-1.el6op

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: atomic-openshift-0:3.1.1.6-1.git.0.b57e8bd.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: heapster-0:0.18.2-3.gitaf4752e.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: jenkins-0:1.625.3-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-align-text-0:0.1.3-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-ansi-green-0:0.1.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-ansi-wrap-0:0.1.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-anymatch-0:1.3.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-array-unique-0:0.2.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-arr-diff-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-arr-flatten-0:1.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-arrify-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-async-each-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-binary-extensions-0:1.3.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-braces-0:1.8.2-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-capture-stack-trace-0:1.0.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-chokidar-0:1.4.1-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-configstore-0:1.4.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-create-error-class-0:2.0.1-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-deep-extend-0:0.3.2-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-duplexer-0:0.1.1-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-duplexify-0:3.4.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-end-of-stream-0:1.1.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-error-ex-0:1.2.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-es6-promise-0:3.0.2-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-event-stream-0:3.3.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-expand-brackets-0:0.1.4-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-expand-range-0:1.8.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-extglob-0:0.3.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-filename-regex-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-fill-range-0:2.2.3-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-for-in-0:0.1.4-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-for-own-0:0.1.3-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-from-0:0.1.3-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-glob-base-0:0.3.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-glob-parent-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-got-0:5.2.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-graceful-fs-0:4.1.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-ini-0:1.1.0-6.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-binary-path-0:1.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-dotfile-0:1.0.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-equal-shallow-0:0.1.3-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-extendable-0:0.1.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-extglob-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-glob-0:2.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-npm-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-number-0:2.1.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-isobject-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-plain-obj-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-primitive-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-redirect-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-is-stream-0:1.0.1-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-kind-of-0:3.0.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-latest-version-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lazy-cache-0:1.0.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.assign-0:3.2.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.baseassign-0:3.2.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.basecopy-0:3.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.bindcallback-0:3.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.createassigner-0:3.1.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.defaults-0:3.1.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.getnative-0:3.9.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.isarguments-0:3.0.4-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.isarray-0:3.0.4-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.isiterateecall-0:3.0.9-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.keys-0:3.1.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lodash.restparam-0:3.6.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-lowercase-keys-0:1.0.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-map-stream-0:0.1.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-micromatch-0:2.3.5-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-mkdirp-0:0.5.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-nodemon-0:1.8.1-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-node-status-codes-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-normalize-path-0:2.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-object-assign-0:4.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-object.omit-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-optimist-0:0.4.0-5.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-osenv-0:0.1.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-os-homedir-0:1.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-os-tmpdir-0:1.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-package-json-0:2.3.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-parse-glob-0:3.0.4-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-parse-json-0:2.2.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-pause-stream-0:0.0.11-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-pinkie-0:2.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-pinkie-promise-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-prepend-http-0:1.0.1-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-preserve-0:0.2.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-ps-tree-0:1.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-randomatic-0:1.1.5-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-rc-0:1.1.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-read-all-stream-0:3.0.1-3.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-readdirp-0:2.0.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-regex-cache-0:0.4.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-registry-url-0:3.0.3-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-repeat-element-0:1.1.2-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-semver-0:5.1.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-semver-diff-0:2.1.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-slide-0:1.1.5-3.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-split-0:0.3.3-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-stream-combiner-0:0.2.1-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-string-length-0:1.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-strip-json-comments-0:1.0.2-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-success-symbol-0:0.1.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-through-0:2.3.4-4.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-timed-out-0:2.0.0-3.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-touch-0:1.0.0-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-undefsafe-0:0.0.3-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-unzip-response-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-update-notifier-0:0.6.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-url-parse-lax-0:1.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-uuid-0:2.0.1-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-write-file-atomic-0:1.1.2-2.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nodejs-xdg-basedir-0:2.0.0-1.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: nss_wrapper-0:1.0.3-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: openshift-ansible-0:3.0.35-1.git.0.6a386dd.el7aos

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: openvswitch-0:2.4.0-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Enterprise 3.1Fixed in: origin-kibana-0:0.5.0-1.el7aos

Vendor Advisories (2)

mavenGHSA-x2q2-8pwq-fr5rmedium

Jenkins allows Bypass of Access Restrictions

redhatCVE-2015-5325Moderate

jenkins: JNLP slaves not subject to slave-to-master access control (SECURITY-206)

References

rhn.redhat.com / errata/RHSA-2016-0489.html

access.redhat.com / errata/RHSA-2016:0070

wiki.jenkins-ci.org / display/SECURITY/Jenkins+Security+Advisory+2015-11-11

Vendor Advisory