The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0489 advisory.

    OpenShift Enterprise by Red Hat is the company's cloud computing     Platform-as-a-Service (PaaS) solution designed for on-premise or     private cloud deployments.

    The following security issue is addressed with this release:

    It was found that ActiveMQ did not safely handle user supplied data     when deserializing objects. A remote attacker could use this flaw to     execute arbitrary code with the permissions of the ActiveMQ     application. (CVE-2015-5254)

    An update for Jenkins Continuous Integration Server that addresses a     large number of security issues including XSS, CSRF, information     disclosure and code execution have been addressed as well.
    (CVE-2015-5317, CVE-2015-5318, CVE-2015-5319, CVE-2015-5320,     CVE-2015-5321, CVE-2015-5322, CVE-2015-5323, CVE-2015-5324,     CVE-2015-5325, CVE-2015-5326, CVE-2015-7537, CVE-2015-7538,     CVE-2015-7539, CVE-2015-8103)

    Space precludes documenting all of the bug fixes in this advisory. See     the OpenShift Enterprise Technical Notes, which will be updated     shortly for release 2.2.9, for details about these changes:

    https://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-     single/Technical_Notes/index.html

    All OpenShift Enterprise 2 users are advised to upgrade to these     updated packages.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 : Red Hat OpenShift Enterprise 2.2.9 (RHSA-2016:0489)

critical Nessus Plugin ID 119368

Version 1.12

Version 1.11

Version 1.10

Version 1.12 Nov 5, 2024, 12:50 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202411051250
Version 1.11 Jul 17, 2024, 7:20 AM CVSSv3 score source (changed from "CVE-2015-5254" to "CVE-2015-8103") Plugin Feed: 202407170720
Version 1.10 May 14, 2023, 12:09 PM CISA reference Plugin Feed: 202305141209