FreeBSD : jenkins -- Privilege escalation vulnerability in bundled Spring Security library (a45d945a-cc2c-4cd7-a941-fb58fdb1b01e)

high Nessus Plugin ID 146763

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

Jenkins Security Advisory : Description(high) SECURITY-2195 / CVE-2021-22112 Privilege escalation vulnerability in bundled Spring Security library

Solution

Update the affected package.

See Also

https://www.jenkins.io/security/advisory/2021-02-19/

http://www.nessus.org/u?05a1a94f

Plugin Details

Severity: High

ID: 146763

File Name: freebsd_pkg_a45d945acc2c4cd7a941fb58fdb1b01e.nasl

Version: 1.1

Type: local

Published: 2/22/2021

Updated: 2/22/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:jenkins, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 2/20/2021

Vulnerability Publication Date: 2/19/2021