CVE-2019-1003049

mediumpriority · track · 33EPSS 0.021 · 82 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

2.11% (82nd) EPSS

CVSS 6.8 · medium

Is it mine?

66 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · nvd · osv

EPSS · scored 2026-10-27

Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, because the fix for CVE-2019-1003004 in these releases did not reject existing remoting-based CLI authentication caches.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedatomic-enterprise-service-catalog-1:3.11.117-1.git.1.376e432.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-enterprise-service-catalog-1:3.11.117-1.git.1.376e432.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-enterprise-service-catalog-1:3.11.117-1.git.1.376e432.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-enterprise-service-catalog-svcat-1:3.11.117-1.git.1.376e432.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-enterprise-service-catalog-svcat-1:3.11.117-1.git.1.376e432.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-cluster-autoscaler-0:3.11.117-1.git.1.caa79fa.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-cluster-autoscaler-0:3.11.117-1.git.1.caa79fa.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-cluster-autoscaler-0:3.11.117-1.git.1.caa79fa.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-descheduler-0:3.11.117-1.git.1.1635b0a.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-descheduler-0:3.11.117-1.git.1.1635b0a.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-descheduler-0:3.11.117-1.git.1.1635b0a.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-dockerregistry-0:3.11.117-1.git.1.6a42b08.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-dockerregistry-0:3.11.117-1.git.1.6a42b08.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-dockerregistry-0:3.11.117-1.git.1.6a42b08.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-metrics-server-0:3.11.117-1.git.1.319d58e.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-metrics-server-0:3.11.117-1.git.1.319d58e.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-metrics-server-0:3.11.117-1.git.1.319d58e.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-node-problem-detector-0:3.11.117-1.git.1.0345fe3.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-node-problem-detector-0:3.11.117-1.git.1.0345fe3.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-node-problem-detector-0:3.11.117-1.git.1.0345fe3.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-service-idler-0:3.11.117-1.git.1.887bb82.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-service-idler-0:3.11.117-1.git.1.887bb82.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-service-idler-0:3.11.117-1.git.1.887bb82.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-web-console-0:3.11.117-1.git.1.be7a05c.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-web-console-0:3.11.117-1.git.1.be7a05c.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedatomic-openshift-web-console-0:3.11.117-1.git.1.be7a05c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedcri-o-0:1.11.14-1.rhaos3.11.gitd56660e.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedcri-o-0:1.11.14-1.rhaos3.11.gitd56660e.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedcri-o-0:1.11.14-1.rhaos3.11.gitd56660e.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedcri-o-debuginfo-0:1.11.14-1.rhaos3.11.gitd56660e.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedcri-o-debuginfo-0:1.11.14-1.rhaos3.11.gitd56660e.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedgolang-github-openshift-oauth-proxy-0:3.11.117-1.git.1.2b006d2.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedgolang-github-openshift-oauth-proxy-0:3.11.117-1.git.1.2b006d2.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedgolang-github-openshift-oauth-proxy-0:3.11.117-1.git.1.2b006d2.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedgolang-github-prometheus-alertmanager-0:3.11.117-1.git.1.207ef35.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedgolang-github-prometheus-node_exporter-0:3.11.117-1.git.1.dcee33f.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedgolang-github-prometheus-prometheus-0:3.11.117-1.git.1.f52d417.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedjenkins-0:2.164.2.1555422716-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedjenkins-0:2.164.2.1555422716-1.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedjenkins-2-plugins-0:3.11.1559667994-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedjenkins-2-plugins-0:3.11.1559667994-1.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedopenshift-ansible-0:3.11.123-1.git.0.db681ba.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedopenshift-ansible-0:3.11.123-1.git.0.db681ba.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedopenshift-ansible-docs-0:3.11.123-1.git.0.db681ba.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedopenshift-ansible-playbooks-0:3.11.123-1.git.0.db681ba.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedopenshift-ansible-roles-0:3.11.123-1.git.0.db681ba.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedopenshift-ansible-test-0:3.11.123-1.git.0.db681ba.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedopenshift-enterprise-autoheal-0:3.11.117-1.git.1.ef32a58.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedopenshift-enterprise-autoheal-0:3.11.117-1.git.1.ef32a58.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedopenshift-enterprise-autoheal-0:3.11.117-1.git.1.ef32a58.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedopenshift-enterprise-cluster-capacity-0:3.11.117-1.git.1.6593fce.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedopenshift-enterprise-cluster-capacity-0:3.11.117-1.git.1.6593fce.el7.src as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedopenshift-enterprise-cluster-capacity-0:3.11.117-1.git.1.6593fce.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedprometheus-0:3.11.117-1.git.1.f52d417.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedprometheus-0:3.11.117-1.git.1.f52d417.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedprometheus-alertmanager-0:3.11.117-1.git.1.207ef35.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedprometheus-alertmanager-0:3.11.117-1.git.1.207ef35.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedprometheus-node-exporter-0:3.11.117-1.git.1.dcee33f.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605
Fixedprometheus-node-exporter-0:3.11.117-1.git.1.dcee33f.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11redhat_csaf
Before applying this update, ensure all previously released errata relevant to your system have been applied. For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for release 3.11.117, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
https://access.redhat.com/errata/RHBA-2019:1605

cvss

Technical severity, 0–10. One row per scoring source.

8.1

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–8.1

v2.06.8mediumAV:N/AC:M/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 8.6 · impact 6.4

v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.2 · impact 5.9

v3.05mediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · Red Hat Product Security US

v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · OSV

v3.17.4highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-613USprimaryCWE-287USCWE-613US

affected products (66)

Products and version ranges known to be affected.

Jenkins Project Jenkins≤ 2.171 and earlier, LTS 2.164.1 and earlierenisa_euvdEU
jenkins jenkins≤ 2.171nvdUScpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*
jenkins jenkins≤ 2.164.1nvdUScpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*
oracle communications cloud native core automated test suite= 1.9.0nvdUScpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:*:*:*:*:*:*:*:*
redhat openshift container platform= 3.11nvdUScpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*
Maven org.jenkins-ci.main:jenkins-core< 2.164.2osvUSpkg:maven/org.jenkins-ci.main/jenkins-core
Maven org.jenkins-ci.main:jenkins-core2.165 → 2.172osvUSpkg:maven/org.jenkins-ci.main/jenkins-core
atomic-enterprise-service-catalog-1:3.11.117-1.git.1.376e432.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11all versionsfixedredhat_csafUS
atomic-enterprise-service-catalog-1:3.11.117-1.git.1.376e432.el7.src as a component of Red Hat OpenShift Container Platform 3.11all versionsfixedredhat_csafUS
atomic-enterprise-service-catalog-1:3.11.117-1.git.1.376e432.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11all versionsfixedredhat_csafUS
atomic-enterprise-service-catalog-svcat-1:3.11.117-1.git.1.376e432.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11all versionsfixedredhat_csafUS
atomic-enterprise-service-catalog-svcat-1:3.11.117-1.git.1.376e432.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11all versionsfixedredhat_csafUS
atomic-openshift-cluster-autoscaler-0:3.11.117-1.git.1.caa79fa.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11all versionsfixedredhat_csafUS
atomic-openshift-cluster-autoscaler-0:3.11.117-1.git.1.caa79fa.el7.src as a component of Red Hat OpenShift Container Platform 3.11all versionsfixedredhat_csafUS
atomic-openshift-cluster-autoscaler-0:3.11.117-1.git.1.caa79fa.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11all versionsfixedredhat_csafUS
atomic-openshift-descheduler-0:3.11.117-1.git.1.1635b0a.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11all versionsfixedredhat_csafUS
atomic-openshift-descheduler-0:3.11.117-1.git.1.1635b0a.el7.src as a component of Red Hat OpenShift Container Platform 3.11all versionsfixedredhat_csafUS
atomic-openshift-descheduler-0:3.11.117-1.git.1.1635b0a.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11all versionsfixedredhat_csafUS
atomic-openshift-dockerregistry-0:3.11.117-1.git.1.6a42b08.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11all versionsfixedredhat_csafUS
atomic-openshift-dockerregistry-0:3.11.117-1.git.1.6a42b08.el7.src as a component of Red Hat OpenShift Container Platform 3.11all versionsfixedredhat_csafUS

showing 20 of 66

advisories (2)

Vendor and ecosystem advisories describing this.

RHBA-2019:1605Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update2019-06-26csaf · redhat_csafUS
Red Hat OpenShift Container Platform release 3.11.117 is now available with updates to packages and images that fix several bugs and add enhancements.
GHSA-742j-jcfr-23w3Insufficient Session Expiration in Jenkins2022-05-13ghsa · osvUS
Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, because the fix for CVE-2019-1003004 in these releases did not reject existing remoting-based CLI authentication caches.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd osv redhat_csaf NVD CVE.org MITRE

published 2019-04-10modified 2026-06-17

related (733)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2014-2595US	critical9.8	16.9% (97th)	Exploit	2020-02-12
Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string.
CVE-2020-27422US	critical9.8	7.86% (95th)	Exploit	2020-11-16
In Anuko Time Tracker v1.19.23.5311, the password reset link emailed to the user doesn't expire once used, allowing an attacker to use the same link to takeover the account.
CVE-2021-24019US	critical9.8	3.90% (90th)	Exploit	2021-10-06
An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and below, 6.2.8 and below may allow an attacker to reuse the unexpired admin user sess…
CVE-2020-29667US	critical9.8	3.23% (88th)	Exploit	2020-12-10
In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSID=LANIT-IMANAGER, can achieve control over the system becaus…
CVE-2017-6529US	high8.8	2.90% (87th)	Exploit	2017-03-09
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter.

+728 more

references (18)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan