Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-2hfm-g99a-67de

Summary A sandbox bypass vulnerability exists in Script Security Plugin 1.47 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM, if plugins using the Groovy sandbox are installed.

Aliases

alias	CVE-2018-1000865

alias	GHSA-p4p5-3v2j-w5rv

Fixed_packages

url	pkg:maven/org.jenkins-ci.plugins/script-security@1.48
purl	pkg:maven/org.jenkins-ci.plugins/script-security@1.48
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.plugins/script-security@1.48

Affected_packages

url pkg:maven/org.jenkins-ci.plugins/script-security@1.47

purl pkg:maven/org.jenkins-ci.plugins/script-security@1.47

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2hfm-g99a-67de

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.plugins/script-security@1.47

url pkg:rpm/redhat/atomic-enterprise-service-catalog@1:3.11.82-1.git.1673.133961e?arch=el7

purl pkg:rpm/redhat/atomic-enterprise-service-catalog@1:3.11.82-1.git.1673.133961e?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-enterprise-service-catalog@1:3.11.82-1.git.1673.133961e%3Farch=el7

url pkg:rpm/redhat/atomic-openshift@3.11.82-1.git.0.08bc31b?arch=el7

purl pkg:rpm/redhat/atomic-openshift@3.11.82-1.git.0.08bc31b?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift@3.11.82-1.git.0.08bc31b%3Farch=el7

url pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.82-1.git.0.efb6af0?arch=el7

purl pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.82-1.git.0.efb6af0?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.82-1.git.0.efb6af0%3Farch=el7

url pkg:rpm/redhat/atomic-openshift-descheduler@3.11.82-1.git.300.89765c9?arch=el7

purl pkg:rpm/redhat/atomic-openshift-descheduler@3.11.82-1.git.300.89765c9?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-descheduler@3.11.82-1.git.300.89765c9%3Farch=el7

url pkg:rpm/redhat/atomic-openshift-dockerregistry@3.11.82-1.git.452.0ce6383?arch=el7

purl pkg:rpm/redhat/atomic-openshift-dockerregistry@3.11.82-1.git.452.0ce6383?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-dockerregistry@3.11.82-1.git.452.0ce6383%3Farch=el7

url pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.82-1.git.52.2fdca3f?arch=el7

purl pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.82-1.git.52.2fdca3f?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.82-1.git.52.2fdca3f%3Farch=el7

url pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.82-1.git.254.a448936?arch=el7

purl pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.82-1.git.254.a448936?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.82-1.git.254.a448936%3Farch=el7

url pkg:rpm/redhat/atomic-openshift-service-idler@3.11.82-1.git.14.e353758?arch=el7

purl pkg:rpm/redhat/atomic-openshift-service-idler@3.11.82-1.git.14.e353758?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-service-idler@3.11.82-1.git.14.e353758%3Farch=el7

url pkg:rpm/redhat/atomic-openshift-web-console@3.11.82-1.git.355.5e8b1d9?arch=el7

purl pkg:rpm/redhat/atomic-openshift-web-console@3.11.82-1.git.355.5e8b1d9?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-web-console@3.11.82-1.git.355.5e8b1d9%3Farch=el7

url pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.82-1.git.425.7cac034?arch=el7

purl pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.82-1.git.425.7cac034?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.82-1.git.425.7cac034%3Farch=el7

url pkg:rpm/redhat/golang-github-prometheus-alertmanager@3.11.82-1.git.0.3bf41ce?arch=el7

purl pkg:rpm/redhat/golang-github-prometheus-alertmanager@3.11.82-1.git.0.3bf41ce?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang-github-prometheus-alertmanager@3.11.82-1.git.0.3bf41ce%3Farch=el7

url pkg:rpm/redhat/golang-github-prometheus-node_exporter@3.11.82-1.git.1063.48444e8?arch=el7

purl pkg:rpm/redhat/golang-github-prometheus-node_exporter@3.11.82-1.git.1063.48444e8?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang-github-prometheus-node_exporter@3.11.82-1.git.1063.48444e8%3Farch=el7

url pkg:rpm/redhat/golang-github-prometheus-prometheus@3.11.82-1.git.5027.9d24833?arch=el7

purl pkg:rpm/redhat/golang-github-prometheus-prometheus@3.11.82-1.git.5027.9d24833?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang-github-prometheus-prometheus@3.11.82-1.git.5027.9d24833%3Farch=el7

url pkg:rpm/redhat/haproxy@1.8.17-3?arch=el7

purl pkg:rpm/redhat/haproxy@1.8.17-3?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/haproxy@1.8.17-3%3Farch=el7

url pkg:rpm/redhat/jenkins@2.150.2.1549032159-1?arch=el7

purl pkg:rpm/redhat/jenkins@2.150.2.1549032159-1?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins@2.150.2.1549032159-1%3Farch=el7

url pkg:rpm/redhat/jenkins-2-plugins@3.11.1549642489-1?arch=el7

purl pkg:rpm/redhat/jenkins-2-plugins@3.11.1549642489-1?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins-2-plugins@3.11.1549642489-1%3Farch=el7

url pkg:rpm/redhat/openshift-ansible@3.11.82-3.git.0.9718d0a?arch=el7

purl pkg:rpm/redhat/openshift-ansible@3.11.82-3.git.0.9718d0a?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openshift-ansible@3.11.82-3.git.0.9718d0a%3Farch=el7

url pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.82-1.git.219.0b5aff4?arch=el7

purl pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.82-1.git.219.0b5aff4?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.82-1.git.219.0b5aff4%3Farch=el7

url pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.82-1.git.380.cf11c51?arch=el7

purl pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.82-1.git.380.cf11c51?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1s7q-drqn-4bhd

vulnerability	VCID-2hfm-g99a-67de

vulnerability	VCID-2qhb-fu9x-k7bd

vulnerability	VCID-31wf-mpnt-dycm

vulnerability	VCID-48er-rqvk-nyhg

vulnerability	VCID-537v-ugyf-17e2

vulnerability	VCID-6ncw-2m21-t3bg

vulnerability	VCID-8575-gsc8-xkd6

vulnerability	VCID-8e1s-dgj6-vyfq

vulnerability	VCID-a6ur-dzqs-hfge

vulnerability	VCID-bmfa-vgay-2fbt

vulnerability	VCID-cf29-8rvn-kfbd

vulnerability	VCID-gmw4-qd6z-aqht

vulnerability	VCID-qdk1-p4qg-p3ar

vulnerability	VCID-uyuv-7nbj-zfcp

vulnerability	VCID-ygq7-sv7h-7fax

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.82-1.git.380.cf11c51%3Farch=el7

References

reference_url

https://access.redhat.com/errata/RHBA-2019:0326

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://access.redhat.com/errata/RHBA-2019:0326

reference_url

https://access.redhat.com/errata/RHBA-2019:0327

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://access.redhat.com/errata/RHBA-2019:0327

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000865.json

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000865.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2018-1000865

reference_id

reference_type

scores

value	0.00615
scoring_system	epss
scoring_elements	0.69935
published_at	2026-04-18T12:55:00Z

value	0.00615
scoring_system	epss
scoring_elements	0.69827
published_at	2026-04-07T12:55:00Z

value	0.00615
scoring_system	epss
scoring_elements	0.69876
published_at	2026-04-08T12:55:00Z

value	0.00615
scoring_system	epss
scoring_elements	0.69891
published_at	2026-04-09T12:55:00Z

value	0.00615
scoring_system	epss
scoring_elements	0.69914
published_at	2026-04-11T12:55:00Z

value	0.00615
scoring_system	epss
scoring_elements	0.69899
published_at	2026-04-12T12:55:00Z

value	0.00615
scoring_system	epss
scoring_elements	0.69885
published_at	2026-04-13T12:55:00Z

value	0.00615
scoring_system	epss
scoring_elements	0.69926
published_at	2026-04-16T12:55:00Z

value	0.00615
scoring_system	epss
scoring_elements	0.69823
published_at	2026-04-01T12:55:00Z

value	0.00615
scoring_system	epss
scoring_elements	0.69835
published_at	2026-04-02T12:55:00Z

value	0.00615
scoring_system	epss
scoring_elements	0.6985
published_at	2026-04-04T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2018-1000865

reference_url	https://github.com/jenkinsci/groovy-sandbox/commit/0cd7ec12b7c56cfa3167d99c5f43147ce05449d3
reference_id
reference_type
scores
url	https://github.com/jenkinsci/groovy-sandbox/commit/0cd7ec12b7c56cfa3167d99c5f43147ce05449d3

reference_url

https://github.com/jenkinsci/script-security-plugin/commit/16c862ae9d4038a3edbd8bdfb0fd1401a509d56b

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/jenkinsci/script-security-plugin/commit/16c862ae9d4038a3edbd8bdfb0fd1401a509d56b

reference_url

https://jenkins.io/security/advisory/2018-10-29/#SECURITY-1186

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://jenkins.io/security/advisory/2018-10-29/#SECURITY-1186

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1647059
reference_id	1647059
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1647059

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2018-1000865

reference_id

CVE-2018-1000865

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2018-1000865

reference_url

https://github.com/advisories/GHSA-p4p5-3v2j-w5rv

reference_id

GHSA-p4p5-3v2j-w5rv

reference_type

scores

value	HIGH
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-p4p5-3v2j-w5rv

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	269
name	Improper Privilege Management
description	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	94
name	Improper Control of Generation of Code ('Code Injection')
description	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Exploits

Severity_range_score 7.0 - 8.9

Exploitability 0.5

Weighted_severity 8.0

Risk_score 4.0

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2hfm-g99a-67de

Vulnerability Instance