The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3625 advisory.

  - jenkins-credentials-binding-plugin: information disclosure in build log when build contains no build steps     (CVE-2020-2181)

  - jenkins-credentials-binding-plugin: improper masking of secrets (CVE-2020-2182)

  - jenkins-script-security-plugin: cross-site scripting vulnerability due to configure sandboxed scripts     (CVE-2020-2190)

  - jenkins-2-plugins/matrix-project: Stored XSS vulnerability in single axis builds tooltips (CVE-2020-2224)

  - jenkins-2-plugins/matrix-project: Stored XSS vulnerability in multiple axis builds tooltips     (CVE-2020-2225)

  - jenkins-2-plugins/matrix-auth: Stored XSS vulnerability in Matrix Authorization Strategy Plugin     (CVE-2020-2226)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3453 advisory.

  - jenkins-credentials-binding-plugin: information disclosure in build log when build contains no build steps     (CVE-2020-2181)

  - jenkins-credentials-binding-plugin: improper masking of secrets (CVE-2020-2182)

  - jenkins-2-plugins/matrix-project: Stored XSS vulnerability in single axis builds tooltips (CVE-2020-2224)

  - jenkins-2-plugins/matrix-project: Stored XSS vulnerability in multiple axis builds tooltips     (CVE-2020-2225)

  - jenkins-2-plugins/matrix-auth: Stored XSS vulnerability in Matrix Authorization Strategy Plugin     (CVE-2020-2226)

  - python-rsa: decryption of ciphertext leads to DoS (CVE-2020-13757)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3541 advisory.

  - jenkins-jira-plugin: plugin information disclosure (CVE-2019-16541)

  - python-rsa: decryption of ciphertext leads to DoS (CVE-2020-13757)

  - openshift-ansible: cors allowed origin allows changing url protocol (CVE-2020-1741)

  - jenkins: Stored XSS vulnerability in job build time trend (CVE-2020-2220)

  - jenkins: Stored XSS vulnerability in upstream cause (CVE-2020-2221)

  - jenkins: Stored XSS vulnerability in 'keep forever' badge icons (CVE-2020-2222)

  - jenkins: Stored XSS vulnerability in console links (CVE-2020-2223)

  - jenkins-2-plugins/matrix-project: Stored XSS vulnerability in single axis builds tooltips (CVE-2020-2224)

  - jenkins-2-plugins/matrix-project: Stored XSS vulnerability in multiple axis builds tooltips     (CVE-2020-2225)

  - jenkins-2-plugins/matrix-auth: Stored XSS vulnerability in Matrix Authorization Strategy Plugin     (CVE-2020-2226)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4265 advisory.

  - jenkins-credentials-binding-plugin: information disclosure in build log when build contains no build steps     (CVE-2020-2181)

  - jenkins-credentials-binding-plugin: improper masking of secrets (CVE-2020-2182)

  - jenkins-2-plugins/matrix-project: Stored XSS vulnerability in single axis builds tooltips (CVE-2020-2224)

  - jenkins-2-plugins/matrix-project: Stored XSS vulnerability in multiple axis builds tooltips     (CVE-2020-2225)

  - jenkins-2-plugins/matrix-auth: Stored XSS vulnerability in Matrix Authorization Strategy Plugin     (CVE-2020-2226)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
140407	RHEL 7 : OpenShift Container Platform 4.4.20 jenkins-2-plugins (RHSA-2020:3625)	Nessus	Red Hat Local Security Checks	9/8/2020	5/25/2023	medium
139621	RHEL 7 : OpenShift Container Platform 4.5.6 (RHSA-2020:3453)	Nessus	Red Hat Local Security Checks	8/18/2020	4/24/2024	high
139919	RHEL 7 : OpenShift Container Platform 3.11 (RHSA-2020:3541)	Nessus	Red Hat Local Security Checks	8/27/2020	2/23/2024	critical
141582	RHEL 7 : OpenShift Container Platform 4.3.40 jenkins-2-plugins (RHSA-2020:4265)	Nessus	Red Hat Local Security Checks	10/20/2020	4/24/2024	medium

Detections

Analytics

Plugins Search

medium

high

critical

medium