RHSA-2024:3635: jenkins Red Hat

CVSS: 8.8v3.1HighPublished

Published 01-10-2024Last modified 19-10-2026

Open JSON

Vulnerability summary

RHSA-2024:3635 is a high (CVSS 8.8) vulnerability in jenkins Red Hat.

Overall risk

35/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.8/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 8 · Downstream 0 · Related 1

CVE-2023-48795 CVE-2024-22201 CVE-2024-23899 CVE-2024-23900 CVE-2024-24786 CVE-2024-28149+2 more

Timeline

01-10-2024
PublishedVulnerability first disclosed.
19-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update

CVSS metrics

1 score · 1 source · 1 version

v3.18.8

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat2 products

jenkins< 0:2.440.3.1716445200-3.el8
jenkins-2-plugins< 0:4.12.1716445211-1.el8

1 vendor · 2 products

References

48 links

Show all 48 references

security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3635.jsonAdvisory
access.redhat.com/security/cve/CVE-2023-48795REPORT
www.cve.org/CVERecord?id=CVE-2023-48795Advisory
nvd.nist.gov/vuln/detail/CVE-2023-48795Advisory
access.redhat.com/solutions/7071748ARTICLE
terrapin-attack.comARTICLE
access.redhat.com/security/cve/CVE-2024-22201REPORT
www.cve.org/CVERecord?id=CVE-2024-22201Advisory
nvd.nist.gov/vuln/detail/CVE-2024-22201Advisory
github.com/jetty/jetty.project/issues/11256ARTICLE
github.com/jetty/jetty.project/security/advisories/GHSA-rggv-cv7r-mw98ARTICLE
access.redhat.com/security/cve/CVE-2024-23899REPORT
www.cve.org/CVERecord?id=CVE-2024-23899Advisory
nvd.nist.gov/vuln/detail/CVE-2024-23899Advisory
www.openwall.com/lists/oss-security/2024/01/24/6ARTICLE
www.jenkins.io/security/advisory/2024-01-24/ARTICLE
access.redhat.com/security/cve/CVE-2024-23900REPORT
www.cve.org/CVERecord?id=CVE-2024-23900Advisory
nvd.nist.gov/vuln/detail/CVE-2024-23900Advisory
www.jenkins.io/security/advisory/2024-01-24/ARTICLE
access.redhat.com/security/cve/CVE-2024-24786REPORT
www.cve.org/CVERecord?id=CVE-2024-24786Advisory
nvd.nist.gov/vuln/detail/CVE-2024-24786Advisory
go.dev/cl/569356ARTICLE
groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/ARTICLE
pkg.go.dev/vuln/GO-2024-2611Advisory
access.redhat.com/security/cve/CVE-2024-28149REPORT
www.cve.org/CVERecord?id=CVE-2024-28149Advisory
nvd.nist.gov/vuln/detail/CVE-2024-28149Advisory
www.jenkins.io/security/advisory/2024-03-06/ARTICLE
access.redhat.com/security/cve/CVE-2024-34144REPORT
www.cve.org/CVERecord?id=CVE-2024-34144Advisory
nvd.nist.gov/vuln/detail/CVE-2024-34144Advisory
www.openwall.com/lists/oss-security/2024/05/02/3ARTICLE
www.jenkins.io/security/advisory/2024-05-02/ARTICLE
access.redhat.com/security/cve/CVE-2024-34145REPORT
www.cve.org/CVERecord?id=CVE-2024-34145Advisory
nvd.nist.gov/vuln/detail/CVE-2024-34145Advisory