Jenkins Multiple Security Vulnerabilities

Bugtraq ID:	106532
Class:	Unknown
CVE:	CVE-2018-1000406 CVE-2018-1000407 CVE-2018-1000408 CVE-2018-1000409 CVE-2018-1000410 CVE-2018-1000411 CVE-2018-1000412 CVE-2018-1000413 CVE-2018-1000414 CVE-2018-1000415 CVE-2018-1000416 CVE-2018-1000417 CVE-2018-1000418 CVE-2018-1000419 CVE-2018-1000420 CVE-2018-1000421 CVE-2018-1000422 CVE-2018-1000423 CVE-2018-1000424 CVE-2018-1000425 CVE-2018-1000426
Remote:	Yes
Local:	No
Published:	Jan 09 2019 12:00AM
Updated:	Jan 09 2019 12:00AM
Credit:	Apple Information Security, Evan Grant, Oleg Nenashev, Sam Gleske, Wadeck Follonier, CloudBees, Inc. and Zhao Xiaojie.
Vulnerable:	Jenkins Jenkins 2.138.1 Jenkins Jenkins 2.145 Jenkins Jenkins 2.144 Jenkins Jenkins 2.143 Jenkins Jenkins 2.142 Jenkins Jenkins 2.141 Jenkins Jenkins 2.140 Jenkins Jenkins 2.138 Jenkins Jenkins 2.137 Jenkins Jenkins 2.136 Jenkins Jenkins 2.135 Jenkins Jenkins 2.134 Jenkins Jenkins 2.133 Jenkins Jenkins 2.132 Jenkins Jenkins 2.131
Not Vulnerable:	Jenkins Jenkins 2.138.2 Jenkins Jenkins 2.146

Jenkins Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Jenkins Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Jenkins Multiple Security Vulnerabilities

References:

• Jenkins Home Page (Jenkins)
  
• Jenkins Product Page (Jenkins)
  
• Jenkins Security Advisory 2018-10-10 (Jenkins)