{"id":"CVE-2019-10328","aliases":["EUVD-2022-5283","GHSA-v558-fhw2-v46w","RHBA-2019:1605","RHBA-2019:2921","RHSA-2019:1636"],"status":"published","title":"Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin","description":"Jenkins Pipeline Remote Loader Plugin 1.4 and earlier provided a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.","severity":{"version":"3.0","score":9.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01939,"percentile":0.80251,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-183","CWE-693"],"published":"2019-05-31T14:20:19Z","modified":"2026-10-24T10:30:55Z","fixes":[{"ecosystem":"Maven","package":"org.jenkins-ci.plugins:workflow-remote-loader","fixed_in":["1.5"],"sources":["ghsa","osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"jenkins-2-plugins","fixed_in":["0:4.2.1568997376-1.el7"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.jenkins-ci.plugins:workflow-remote-loader","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.jenkins-ci.plugins:workflow-remote-loader","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5"}]}],"versions":["1.0","1.1","1.2","1.3","1.4"]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-enterprise-service-catalog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.11.117-1.git.1.376e432.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-enterprise-service-catalog-svcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.11.117-1.git.1.376e432.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-cluster-autoscaler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.caa79fa.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-descheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.1635b0a.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-dockerregistry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.6a42b08.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-metrics-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.319d58e.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-node-problem-detector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.0345fe3.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-service-idler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.887bb82.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-web-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.be7a05c.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.14-1.rhaos3.11.gitd56660e.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.14-1.rhaos3.11.gitd56660e.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-openshift-oauth-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.2b006d2.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-alertmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.207ef35.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.dcee33f.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.f52d417.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.164.2.1555422716-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.1559667994-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.123-1.git.0.db681ba.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.123-1.git.0.db681ba.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-playbooks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.123-1.git.0.db681ba.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-roles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.123-1.git.0.db681ba.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.123-1.git.0.db681ba.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-enterprise-autoheal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.ef32a58.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-enterprise-cluster-capacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.6593fce.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.f52d417.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus-alertmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.207ef35.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus-node-exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.dcee33f.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1568997376-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.1561471763-1.el7"}]}],"bundled":3}],"products":[{"vendor":"jenkins","product":"pipeline_remote_loader"},{"vendor":"jenkins project","product":"jenkins pipeline remote loader plugin"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2019/05/31/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/108540","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHBA-2019:1605","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1636","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://jenkins.io/security/advisory/2019-05-31/#SECURITY-921","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10328","tags":["advisory"]},{"url":"https://github.com/jenkinsci/workflow-remote-loader-plugin/commit/6f9d60f614359720ec98e22b80ba15e8bf88e712","tags":["web"]},{"url":"https://github.com/advisories/GHSA-v558-fhw2-v46w"},{"url":"https://github.com/jenkinsci/workflow-remote-loader-plugin","tags":["package"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1571190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1585070","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1600741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1624316","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1639427","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1645656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1648973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1651564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1652746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1661076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1667063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1667801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1671315","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1671837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1676399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1680059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1682924","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688250","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688318","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1689230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1689796","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1694724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1696249","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1698018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1698922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1699533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1699696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707799","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708442","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1709254","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1709626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1710424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1710723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1712488","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1713211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1717028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1718458","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1718542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720581","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_1605.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1714054","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10320","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10320","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-05-21/#SECURITY-1322","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10328","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1716794","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10328","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1003049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1699701","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1003049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1003049","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-04-10/#SECURITY-1289","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1003050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1699333","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1003050","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1003050","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-04-10/#SECURITY-1327","tags":["article"]},{"url":"https://access.redhat.com/errata/RHBA-2019:2921","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741622","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_2921.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719782","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1636.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10337","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10337","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10337","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1399","tags":["article"]}],"sources":{"cve":[{"id":"CVE-2019-10328","description":"Jenkins Pipeline Remote Loader Plugin 1.4 and earlier provided a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.","status":"published","published":"2019-05-31T14:20:19Z","modified":"2024-08-04T22:17:20.492Z","updated_at":"2026-11-02T14:20:19.399352Z"}],"euvd":[{"id":"EUVD-2022-5283","description":"Jenkins Pipeline Remote Loader Plugin 1.4 and earlier provided a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.","status":"published","published":"2019-05-31T14:20:19Z","modified":"2024-08-04T22:17:20Z","updated_at":"2026-11-03T02:40:52.601139Z"}],"ghsa":[{"id":"GHSA-v558-fhw2-v46w","title":"Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin","description":"Jenkins Pipeline Remote Loader Plugin before 1.5 provided a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.","status":"published","published":"2022-05-24T22:00:03Z","modified":"2023-12-28T05:05:40Z","cvss":[{"version":"3.0","score":9.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-183","CWE-693"],"updated_at":"2026-11-02T14:37:28.753349Z"}],"nvd":[{"id":"CVE-2019-10328","description":"Jenkins Pipeline Remote Loader Plugin 1.4 and earlier provided a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.","status":"published","published":"2019-05-31T15:29:00.513Z","modified":"2026-06-17T02:10:43.54Z","cvss":[{"version":"3.0","score":9.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T14:05:14.729983Z"}],"osv":[{"id":"CVE-2019-10328","description":"Jenkins Pipeline Remote Loader Plugin 1.4 and earlier provided a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.","status":"published","published":"2019-05-31T15:29:00.513Z","modified":"2026-10-24T10:30:55.908448567Z","cvss":[{"version":"3.0","score":9.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:10.383287Z"},{"id":"GHSA-v558-fhw2-v46w","title":"Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin","description":"Jenkins Pipeline Remote Loader Plugin before 1.5 provided a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.","status":"published","published":"2022-05-24T22:00:03Z","modified":"2024-02-16T08:24:42.383402Z","cvss":[{"version":"3.0","score":9.9,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-183","CWE-693"],"updated_at":"2026-11-02T15:46:56.639206Z"},{"id":"RHBA-2019:1605","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update","status":"published","published":"2024-09-16T02:39:18Z","modified":"2026-06-27T10:06:37Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHBA-2019:2921","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 4.2 RPM Release Advisory","status":"published","published":"2024-09-16T02:39:25Z","modified":"2026-06-27T10:06:40Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHSA-2019:1636","title":"Red Hat Security Advisory: OpenShift Container Platform 4.1 jenkins-2-plugins security update","status":"published","published":"2024-09-16T02:41:52Z","modified":"2026-06-27T10:07:34Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"}]}}