Vulnerabilities > CVE-2015-1811 - XXE vulnerability in Jenkins Cloudbees 1.596.1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
jenkins
CWE-611
nessus

Summary

XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document.

Vulnerable Configurations

Part Description Count
Application
Jenkins
2

Nessus

  • NASL familyFedora Local Security Checks
    NASL idFEDORA_2015-5466.NASL
    descriptionSecurity fix for CVE-2015-1806, CVE-2015-1807, CVE-2015-1813, CVE-2015-1812, CVE-2015-1810, CVE-2015-1808, CVE-2015-1809, CVE-2015-1814, CVE-2015-1811 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-05
    modified2015-04-20
    plugin id82875
    published2015-04-20
    reporterThis script is Copyright (C) 2015-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/82875
    titleFedora 21 : jenkins-1.590-3.fc21 (2015-5466)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Fedora Security Advisory 2015-5466.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(82875);
      script_version("1.4");
      script_set_attribute(attribute:"plugin_modification_date", value:"2020/06/04");
    
      script_cve_id("CVE-2015-1806", "CVE-2015-1807", "CVE-2015-1808", "CVE-2015-1809", "CVE-2015-1810", "CVE-2015-1811", "CVE-2015-1812", "CVE-2015-1813", "CVE-2015-1814");
      script_xref(name:"FEDORA", value:"2015-5466");
    
      script_name(english:"Fedora 21 : jenkins-1.590-3.fc21 (2015-5466)");
      script_summary(english:"Checks rpm output for the updated package.");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote Fedora host is missing a security update."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "Security fix for CVE-2015-1806, CVE-2015-1807, CVE-2015-1813,
    CVE-2015-1812, CVE-2015-1810, CVE-2015-1808, CVE-2015-1809,
    CVE-2015-1814, CVE-2015-1811
    
    Note that Tenable Network Security has extracted the preceding
    description block directly from the Fedora security advisory. Tenable
    has attempted to automatically clean and format it as much as possible
    without introducing additional issues."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=1205615"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=1205616"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=1205620"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=1205622"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=1205623"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=1205625"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=1205627"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=1205632"
      );
      # https://lists.fedoraproject.org/pipermail/package-announce/2015-April/154780.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?bc75f03d"
      );
      script_set_attribute(
        attribute:"solution", 
        value:"Update the affected jenkins package."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:jenkins");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:21");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2015/10/16");
      script_set_attribute(attribute:"patch_publication_date", value:"2015/04/04");
      script_set_attribute(attribute:"plugin_publication_date", value:"2015/04/20");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2015-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Fedora Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
    os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
    os_ver = os_ver[1];
    if (! ereg(pattern:"^21([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 21.x", "Fedora " + os_ver);
    
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
    
    flag = 0;
    if (rpm_check(release:"FC21", reference:"jenkins-1.590-3.fc21")) flag++;
    
    
    if (flag)
    {
      if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
      else security_hole(0);
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "jenkins");
    }
    
  • NASL familyFedora Local Security Checks
    NASL idFEDORA_2015-5430.NASL
    descriptionSecurity fix for CVE-2015-1806, CVE-2015-1807, CVE-2015-1813, CVE-2015-1812, CVE-2015-1810, CVE-2015-1808, CVE-2015-1809, CVE-2015-1814, CVE-2015-1811 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-05
    modified2015-04-22
    plugin id82956
    published2015-04-22
    reporterThis script is Copyright (C) 2015-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/82956
    titleFedora 22 : jenkins-1.606-1.fc22 / jenkins-executable-war-1.29-4.fc22 / jffi-1.2.7-5.fc22 (2015-5430)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Fedora Security Advisory 2015-5430.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(82956);
      script_version("1.4");
      script_set_attribute(attribute:"plugin_modification_date", value:"2020/06/04");
    
      script_cve_id("CVE-2015-1806", "CVE-2015-1807", "CVE-2015-1808", "CVE-2015-1809", "CVE-2015-1810", "CVE-2015-1811", "CVE-2015-1812", "CVE-2015-1813", "CVE-2015-1814");
      script_xref(name:"FEDORA", value:"2015-5430");
    
      script_name(english:"Fedora 22 : jenkins-1.606-1.fc22 / jenkins-executable-war-1.29-4.fc22 / jffi-1.2.7-5.fc22 (2015-5430)");
      script_summary(english:"Checks rpm output for the updated packages.");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote Fedora host is missing one or more security updates."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "Security fix for CVE-2015-1806, CVE-2015-1807, CVE-2015-1813,
    CVE-2015-1812, CVE-2015-1810, CVE-2015-1808, CVE-2015-1809,
    CVE-2015-1814, CVE-2015-1811
    
    Note that Tenable Network Security has extracted the preceding
    description block directly from the Fedora security advisory. Tenable
    has attempted to automatically clean and format it as much as possible
    without introducing additional issues."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=1205615"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=1205616"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=1205620"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=1205622"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=1205623"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=1205625"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=1205627"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.redhat.com/show_bug.cgi?id=1205632"
      );
      # https://lists.fedoraproject.org/pipermail/package-announce/2015-April/155396.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?40be8b1d"
      );
      # https://lists.fedoraproject.org/pipermail/package-announce/2015-April/155397.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?e7410a2e"
      );
      # https://lists.fedoraproject.org/pipermail/package-announce/2015-April/155398.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?fb0eef2e"
      );
      script_set_attribute(
        attribute:"solution", 
        value:
    "Update the affected jenkins, jenkins-executable-war and / or jffi
    packages."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:jenkins");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:jenkins-executable-war");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:jffi");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:22");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2015/10/16");
      script_set_attribute(attribute:"patch_publication_date", value:"2015/04/02");
      script_set_attribute(attribute:"plugin_publication_date", value:"2015/04/22");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2015-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Fedora Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
    os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
    os_ver = os_ver[1];
    if (! ereg(pattern:"^22([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 22.x", "Fedora " + os_ver);
    
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
    
    flag = 0;
    if (rpm_check(release:"FC22", reference:"jenkins-1.606-1.fc22")) flag++;
    if (rpm_check(release:"FC22", reference:"jenkins-executable-war-1.29-4.fc22")) flag++;
    if (rpm_check(release:"FC22", reference:"jffi-1.2.7-5.fc22")) flag++;
    
    
    if (flag)
    {
      if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
      else security_hole(0);
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "jenkins / jenkins-executable-war / jffi");
    }
    
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2015-1844.NASL
    descriptionRed Hat OpenShift Enterprise release 2.2.7 is now available with updates to packages that fix several bugs and introduce feature enhancements. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the references section. OpenShift Enterprise by Red Hat is the company
    last seen2020-06-12
    modified2018-12-04
    plugin id119363
    published2018-12-04
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/119363
    titleRHEL 6 : Red Hat OpenShift Enterprise 2.2.7 (RHSA-2015:1844)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Red Hat Security Advisory RHSA-2015:1844. The text 
    # itself is copyright (C) Red Hat, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(119363);
      script_version("1.7");
      script_set_attribute(attribute:"plugin_modification_date", value:"2020/06/11");
    
      script_cve_id("CVE-2015-1806", "CVE-2015-1807", "CVE-2015-1808", "CVE-2015-1809", "CVE-2015-1810", "CVE-2015-1811", "CVE-2015-1812", "CVE-2015-1813", "CVE-2015-1814");
      script_xref(name:"RHSA", value:"2015:1844");
    
      script_name(english:"RHEL 6 : Red Hat OpenShift Enterprise 2.2.7 (RHSA-2015:1844)");
      script_summary(english:"Checks the rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis",
        value:"The remote Red Hat host is missing one or more security updates."
      );
      script_set_attribute(
        attribute:"description",
        value:
    "Red Hat OpenShift Enterprise release 2.2.7 is now available with
    updates to packages that fix several bugs and introduce feature
    enhancements.
    
    Red Hat Product Security has rated this update as having Important
    security impact. A Common Vulnerability Scoring System (CVSS) base
    score, which gives a detailed severity rating, is available from the
    CVE link in the references section.
    
    OpenShift Enterprise by Red Hat is the company's cloud computing
    Platform-as-a-Service (PaaS) solution designed for on-premise or
    private cloud deployments.
    
    Space precludes documenting all of the bug fixes in this advisory. See
    the OpenShift Enterprise Technical Notes, which will be updated
    shortly for release 2.2.7, for details about these changes. The
    following security issues are addressed in this release :
    
    A flaw was found in the Jenkins API token-issuing service. The service
    was not properly protected against anonymous users, potentially
    allowing remote attackers to escalate privileges. (CVE-2015-1814)
    
    It was found that the combination filter Groovy script could allow a
    remote attacker to potentially execute arbitrary code on a Jenkins
    master. (CVE-2015-1806)
    
    It was found that when building artifacts, the Jenkins server would
    follow symbolic links, potentially resulting in disclosure of
    information on the server. (CVE-2015-1807)
    
    A denial of service flaw was found in the way Jenkins handled certain
    update center data. An authenticated user could provide specially
    crafted update center data to Jenkins, causing plug-in and tool
    installation to not work properly. (CVE-2015-1808)
    
    It was found that Jenkins' XPath handling allowed XML External Entity
    (XXE) expansion. A remote attacker with read access could use this
    flaw to read arbitrary XML files on the Jenkins server.
    (CVE-2015-1809)
    
    It was discovered that the internal Jenkins user database did not
    restrict access to reserved names, allowing users to escalate
    privileges. (CVE-2015-1810)
    
    It was found that Jenkins' XML handling allowed XML External Entity
    (XXE) expansion. A remote attacker with the ability to pass XML data
    to Jenkins could use this flaw to read arbitrary XML files on the
    Jenkins server. (CVE-2015-1811)
    
    Two cross-site scripting (XSS) flaws were found in Jenkins. A remote
    attacker could use these flaws to conduct XSS attacks against users of
    an application using Jenkins. (CVE-2015-1812, CVE-2015-1813)
    
    https://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/
    html-single/Technical_Notes/index.html All OpenShift Enterprise 2
    users are advised to upgrade to these updated packages."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/errata/RHSA-2015:1844"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2015-1806"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2015-1807"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2015-1813"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2015-1812"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2015-1811"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2015-1810"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2015-1808"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2015-1809"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2015-1814"
      );
      script_set_attribute(attribute:"solution", value:"Update the affected packages.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N");
      script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jenkins");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openshift-origin-broker");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openshift-origin-broker-util");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openshift-origin-cartridge-diy");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openshift-origin-cartridge-haproxy");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openshift-origin-cartridge-jbosseap");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openshift-origin-cartridge-jbossews");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openshift-origin-cartridge-jenkins");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openshift-origin-cartridge-mock");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openshift-origin-cartridge-nodejs");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openshift-origin-cartridge-perl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openshift-origin-cartridge-php");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openshift-origin-cartridge-python");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openshift-origin-cartridge-ruby");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openshift-origin-logshifter");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openshift-origin-node-util");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rhc");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-openshift-origin-console");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-openshift-origin-controller");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-openshift-origin-frontend-apache-vhost");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-openshift-origin-gear-placement");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-openshift-origin-msg-broker-mcollective");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-openshift-origin-node");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:rubygem-openshift-origin-routing-daemon");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:6");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2015/10/16");
      script_set_attribute(attribute:"patch_publication_date", value:"2015/09/30");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/12/04");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Red Hat Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("misc_func.inc");
    include("rpm.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat");
    os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat");
    os_ver = os_ver[1];
    if (! preg(pattern:"^6([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 6.x", "Red Hat " + os_ver);
    
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu);
    
    yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo");
    if (!empty_or_null(yum_updateinfo)) 
    {
      rhsa = "RHSA-2015:1844";
      yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);
      if (!empty_or_null(yum_report))
      {
        security_report_v4(
          port       : 0,
          severity   : SECURITY_HOLE,
          extra      : yum_report 
        );
        exit(0);
      }
      else
      {
        audit_message = "affected by Red Hat security advisory " + rhsa;
        audit(AUDIT_OS_NOT, audit_message);
      }
    }
    else
    {
      flag = 0;
    
      if (! (rpm_exists(release:"RHEL6", rpm:"openshift-origin"))) audit(AUDIT_PACKAGE_NOT_INSTALLED, "OpenShift");
    
      if (rpm_check(release:"RHEL6", reference:"jenkins-1.609.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"openshift-origin-broker-1.16.2.10-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"openshift-origin-broker-util-1.36.2.2-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"openshift-origin-cartridge-diy-1.26.1.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"openshift-origin-cartridge-haproxy-1.30.1.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"openshift-origin-cartridge-jbosseap-2.26.3.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"openshift-origin-cartridge-jbossews-1.34.3.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"openshift-origin-cartridge-jenkins-1.28.2.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"openshift-origin-cartridge-mock-1.22.1.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"openshift-origin-cartridge-nodejs-1.33.1.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"openshift-origin-cartridge-perl-1.30.1.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"openshift-origin-cartridge-php-1.34.1.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"openshift-origin-cartridge-python-1.33.3.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"openshift-origin-cartridge-ruby-1.32.1.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"openshift-origin-logshifter-1.10.1.2-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"openshift-origin-node-util-1.37.2.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"rhc-1.37.1.2-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"rubygem-openshift-origin-console-1.35.2.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"rubygem-openshift-origin-controller-1.37.3.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"rubygem-openshift-origin-frontend-apache-vhost-0.12.4.2-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"rubygem-openshift-origin-gear-placement-0.0.2.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"rubygem-openshift-origin-msg-broker-mcollective-1.35.3.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"rubygem-openshift-origin-node-1.37.1.1-1.el6")) flag++;
      if (rpm_check(release:"RHEL6", reference:"rubygem-openshift-origin-routing-daemon-0.25.1.2-1.el6")) flag++;
    
      if (flag)
      {
        security_report_v4(
          port       : 0,
          severity   : SECURITY_HOLE,
          extra      : rpm_report_get() + redhat_report_package_caveat()
        );
        exit(0);
      }
      else
      {
        tested = pkg_tests_get();
        if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
        else audit(AUDIT_PACKAGE_NOT_INSTALLED, "jenkins / openshift-origin-broker / openshift-origin-broker-util / etc");
      }
    }
    

Redhat

rpms
  • jenkins-0:1.609.1-1.el6op
  • openshift-origin-broker-0:1.16.2.10-1.el6op
  • openshift-origin-broker-util-0:1.36.2.2-1.el6op
  • openshift-origin-cartridge-diy-0:1.26.1.1-1.el6op
  • openshift-origin-cartridge-haproxy-0:1.30.1.1-1.el6op
  • openshift-origin-cartridge-jbosseap-0:2.26.3.1-1.el6op
  • openshift-origin-cartridge-jbossews-0:1.34.3.1-1.el6op
  • openshift-origin-cartridge-jenkins-0:1.28.2.1-1.el6op
  • openshift-origin-cartridge-mock-0:1.22.1.1-1.el6op
  • openshift-origin-cartridge-nodejs-0:1.33.1.1-1.el6op
  • openshift-origin-cartridge-perl-0:1.30.1.1-1.el6op
  • openshift-origin-cartridge-php-0:1.34.1.1-1.el6op
  • openshift-origin-cartridge-python-0:1.33.3.1-1.el6op
  • openshift-origin-cartridge-ruby-0:1.32.1.1-1.el6op
  • openshift-origin-logshifter-0:1.10.1.2-1.el6op
  • openshift-origin-node-util-0:1.37.2.1-1.el6op
  • rhc-0:1.37.1.2-1.el6op
  • rubygem-openshift-origin-console-0:1.35.2.1-1.el6op
  • rubygem-openshift-origin-controller-0:1.37.3.1-1.el6op
  • rubygem-openshift-origin-frontend-apache-vhost-0:0.12.4.2-1.el6op
  • rubygem-openshift-origin-gear-placement-0:0.0.2.1-1.el6op
  • rubygem-openshift-origin-msg-broker-mcollective-0:1.35.3.1-1.el6op
  • rubygem-openshift-origin-node-0:1.37.1.1-1.el6op
  • rubygem-openshift-origin-routing-daemon-0:0.25.1.2-1.el6op