CyberzSOC

Applicability
← Back to CVE-2018-1000861

CVE-2018-1000861

CVSS 9.8 In CISA KEV Jenkins

Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.

Does it affect your version?

A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.

What each source says

Red Hat CSAF/VEX
precedence 100 · revised 2025-11-21
13 affected 2 fixed 82 not affected
OSV.dev (incl. GHSA)
precedence 80 · revised 2026-07-08
4 affected 2 fixed
CVE List v5 (CNA container)
precedence 60 · revised 2025-10-21
1 affected

Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.

Statements (104)

Product Status Versions Remediation Source
red_hat_openshift_container_platform_3.10:jenkins jenkins as a component of Red Hat OpenShift Container Platform 3.10 affected no version stated vendor label: jenkins none available fix in another branch csaf_redhat
red_hat_openshift_container_platform_3.2:jenkins jenkins as a component of Red Hat OpenShift Container Platform 3.2 affected no version stated vendor label: jenkins none available fix in another branch csaf_redhat
red_hat_openshift_container_platform_3.3:jenkins jenkins as a component of Red Hat OpenShift Container Platform 3.3 affected no version stated vendor label: jenkins none available fix in another branch csaf_redhat
red_hat_openshift_container_platform_3.4:jenkins jenkins as a component of Red Hat OpenShift Container Platform 3.4 affected no version stated vendor label: jenkins none available fix in another branch csaf_redhat
red_hat_openshift_container_platform_3.5:jenkins jenkins as a component of Red Hat OpenShift Container Platform 3.5 affected no version stated vendor label: jenkins none available fix in another branch csaf_redhat
red_hat_openshift_container_platform_3.6:jenkins jenkins as a component of Red Hat OpenShift Container Platform 3.6 affected no version stated vendor label: jenkins none available fix in another branch csaf_redhat
red_hat_openshift_container_platform_3.7:jenkins jenkins as a component of Red Hat OpenShift Container Platform 3.7 affected no version stated vendor label: jenkins none available fix in another branch csaf_redhat
red_hat_openshift_container_platform_3.9:jenkins jenkins as a component of Red Hat OpenShift Container Platform 3.9 affected no version stated vendor label: jenkins none available fix in another branch csaf_redhat
red_hat_openshift_container_platform_3.10:jenkins.src jenkins.src as a component of Red Hat OpenShift Container Platform 3.10 affected no version stated vendor label: jenkins.src none available fix in another branch csaf_redhat
red_hat_openshift_container_platform_3.2:jenkins.src jenkins.src as a component of Red Hat OpenShift Container Platform 3.2 affected no version stated vendor label: jenkins.src none available fix in another branch csaf_redhat
red_hat_openshift_container_platform_3.6:jenkins.src jenkins.src as a component of Red Hat OpenShift Container Platform 3.6 affected no version stated vendor label: jenkins.src none available fix in another branch csaf_redhat
red_hat_openshift_container_platform_3.7:jenkins.src jenkins.src as a component of Red Hat OpenShift Container Platform 3.7 affected no version stated vendor label: jenkins.src none available fix in another branch csaf_redhat
red_hat_openshift_container_platform_3.9:jenkins.src jenkins.src as a component of Red Hat OpenShift Container Platform 3.9 affected no version stated vendor label: jenkins.src none available fix in another branch csaf_redhat
7Server-RH7-RHOSE-3.11:jenkins-0:2.138.4.1544416383-1.el7.noarch jenkins-0:2.138.4.1544416383-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11 fixed jenkins-0:2.138.4.1544416383-1.el7.noarch vendor fix → jenkins-0:2.138.4.1544416383-1.el7.noarch (RHBA-2019:0024) csaf_redhat
7Server-RH7-RHOSE-3.11:jenkins-0:2.138.4.1544416383-1.el7.src jenkins-0:2.138.4.1544416383-1.el7.src as a component of Red Hat OpenShift Container Platform 3.11 fixed jenkins-0:2.138.4.1544416383-1.el7.src vendor fix → jenkins-0:2.138.4.1544416383-1.el7.src (RHBA-2019:0024) csaf_redhat
7Server-RH7-RHOSE-3.11:ansible-service-broker-1:1.3.21-1.el7.ppc64le ansible-service-broker-1:1.3.21-1.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present ansible-service-broker-1:1.3.21-1.el7.ppc64le not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:ansible-service-broker-1:1.3.21-1.el7.src ansible-service-broker-1:1.3.21-1.el7.src as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present ansible-service-broker-1:1.3.21-1.el7.src not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:ansible-service-broker-1:1.3.21-1.el7.x86_64 ansible-service-broker-1:1.3.21-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present ansible-service-broker-1:1.3.21-1.el7.x86_64 not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:ansible-service-broker-container-scripts-1:1.3.21-1.el7.noarch ansible-service-broker-container-scripts-1:1.3.21-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present ansible-service-broker-container-scripts-1:1.3.21-1.el7.noarch not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:ansible-service-broker-selinux-1:1.3.21-1.el7.noarch ansible-service-broker-selinux-1:1.3.21-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present ansible-service-broker-selinux-1:1.3.21-1.el7.noarch not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.59-1.git.1671.f166457.el7.ppc64le atomic-enterprise-service-catalog-1:3.11.59-1.git.1671.f166457.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-enterprise-service-catalog-1:3.11.59-1.git.1671.f166457.el7.ppc64le not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.59-1.git.1671.f166457.el7.src atomic-enterprise-service-catalog-1:3.11.59-1.git.1671.f166457.el7.src as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-enterprise-service-catalog-1:3.11.59-1.git.1671.f166457.el7.src not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-1:3.11.59-1.git.1671.f166457.el7.x86_64 atomic-enterprise-service-catalog-1:3.11.59-1.git.1671.f166457.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-enterprise-service-catalog-1:3.11.59-1.git.1671.f166457.el7.x86_64 not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.59-1.git.1671.f166457.el7.ppc64le atomic-enterprise-service-catalog-svcat-1:3.11.59-1.git.1671.f166457.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-enterprise-service-catalog-svcat-1:3.11.59-1.git.1671.f166457.el7.ppc64le not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-enterprise-service-catalog-svcat-1:3.11.59-1.git.1671.f166457.el7.x86_64 atomic-enterprise-service-catalog-svcat-1:3.11.59-1.git.1671.f166457.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-enterprise-service-catalog-svcat-1:3.11.59-1.git.1671.f166457.el7.x86_64 not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.59-1.git.0.7cb6277.el7.ppc64le atomic-openshift-0:3.11.59-1.git.0.7cb6277.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-0:3.11.59-1.git.0.7cb6277.el7.ppc64le not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.59-1.git.0.7cb6277.el7.src atomic-openshift-0:3.11.59-1.git.0.7cb6277.el7.src as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-0:3.11.59-1.git.0.7cb6277.el7.src not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-0:3.11.59-1.git.0.7cb6277.el7.x86_64 atomic-openshift-0:3.11.59-1.git.0.7cb6277.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-0:3.11.59-1.git.0.7cb6277.el7.x86_64 not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.59-1.git.0.7cb6277.el7.ppc64le atomic-openshift-clients-0:3.11.59-1.git.0.7cb6277.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-clients-0:3.11.59-1.git.0.7cb6277.el7.ppc64le not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-clients-0:3.11.59-1.git.0.7cb6277.el7.x86_64 atomic-openshift-clients-0:3.11.59-1.git.0.7cb6277.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-clients-0:3.11.59-1.git.0.7cb6277.el7.x86_64 not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-clients-redistributable-0:3.11.59-1.git.0.7cb6277.el7.x86_64 atomic-openshift-clients-redistributable-0:3.11.59-1.git.0.7cb6277.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-clients-redistributable-0:3.11.59-1.git.0.7cb6277.el7.x86_64 not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.59-1.git.0.1bf08fd.el7.ppc64le atomic-openshift-cluster-autoscaler-0:3.11.59-1.git.0.1bf08fd.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-cluster-autoscaler-0:3.11.59-1.git.0.1bf08fd.el7.ppc64le not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.59-1.git.0.1bf08fd.el7.src atomic-openshift-cluster-autoscaler-0:3.11.59-1.git.0.1bf08fd.el7.src as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-cluster-autoscaler-0:3.11.59-1.git.0.1bf08fd.el7.src not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-cluster-autoscaler-0:3.11.59-1.git.0.1bf08fd.el7.x86_64 atomic-openshift-cluster-autoscaler-0:3.11.59-1.git.0.1bf08fd.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-cluster-autoscaler-0:3.11.59-1.git.0.1bf08fd.el7.x86_64 not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.59-1.git.300.ecee52f.el7.ppc64le atomic-openshift-descheduler-0:3.11.59-1.git.300.ecee52f.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-descheduler-0:3.11.59-1.git.300.ecee52f.el7.ppc64le not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.59-1.git.300.ecee52f.el7.src atomic-openshift-descheduler-0:3.11.59-1.git.300.ecee52f.el7.src as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-descheduler-0:3.11.59-1.git.300.ecee52f.el7.src not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-descheduler-0:3.11.59-1.git.300.ecee52f.el7.x86_64 atomic-openshift-descheduler-0:3.11.59-1.git.300.ecee52f.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-descheduler-0:3.11.59-1.git.300.ecee52f.el7.x86_64 not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-docker-excluder-0:3.11.59-1.git.0.7cb6277.el7.noarch atomic-openshift-docker-excluder-0:3.11.59-1.git.0.7cb6277.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-docker-excluder-0:3.11.59-1.git.0.7cb6277.el7.noarch not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.59-1.git.446.4555762.el7.ppc64le atomic-openshift-dockerregistry-0:3.11.59-1.git.446.4555762.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-dockerregistry-0:3.11.59-1.git.446.4555762.el7.ppc64le not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.59-1.git.446.4555762.el7.src atomic-openshift-dockerregistry-0:3.11.59-1.git.446.4555762.el7.src as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-dockerregistry-0:3.11.59-1.git.446.4555762.el7.src not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-dockerregistry-0:3.11.59-1.git.446.4555762.el7.x86_64 atomic-openshift-dockerregistry-0:3.11.59-1.git.446.4555762.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-dockerregistry-0:3.11.59-1.git.446.4555762.el7.x86_64 not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-excluder-0:3.11.59-1.git.0.7cb6277.el7.noarch atomic-openshift-excluder-0:3.11.59-1.git.0.7cb6277.el7.noarch as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-excluder-0:3.11.59-1.git.0.7cb6277.el7.noarch not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.59-1.git.0.7cb6277.el7.ppc64le atomic-openshift-hyperkube-0:3.11.59-1.git.0.7cb6277.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-hyperkube-0:3.11.59-1.git.0.7cb6277.el7.ppc64le not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-hyperkube-0:3.11.59-1.git.0.7cb6277.el7.x86_64 atomic-openshift-hyperkube-0:3.11.59-1.git.0.7cb6277.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-hyperkube-0:3.11.59-1.git.0.7cb6277.el7.x86_64 not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.59-1.git.0.7cb6277.el7.ppc64le atomic-openshift-hypershift-0:3.11.59-1.git.0.7cb6277.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-hypershift-0:3.11.59-1.git.0.7cb6277.el7.ppc64le not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-hypershift-0:3.11.59-1.git.0.7cb6277.el7.x86_64 atomic-openshift-hypershift-0:3.11.59-1.git.0.7cb6277.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-hypershift-0:3.11.59-1.git.0.7cb6277.el7.x86_64 not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.59-1.git.0.7cb6277.el7.ppc64le atomic-openshift-master-0:3.11.59-1.git.0.7cb6277.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-master-0:3.11.59-1.git.0.7cb6277.el7.ppc64le not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-master-0:3.11.59-1.git.0.7cb6277.el7.x86_64 atomic-openshift-master-0:3.11.59-1.git.0.7cb6277.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-master-0:3.11.59-1.git.0.7cb6277.el7.x86_64 not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.59-1.git.52.3aa1c21.el7.ppc64le atomic-openshift-metrics-server-0:3.11.59-1.git.52.3aa1c21.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-metrics-server-0:3.11.59-1.git.52.3aa1c21.el7.ppc64le not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.59-1.git.52.3aa1c21.el7.src atomic-openshift-metrics-server-0:3.11.59-1.git.52.3aa1c21.el7.src as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-metrics-server-0:3.11.59-1.git.52.3aa1c21.el7.src not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-metrics-server-0:3.11.59-1.git.52.3aa1c21.el7.x86_64 atomic-openshift-metrics-server-0:3.11.59-1.git.52.3aa1c21.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-metrics-server-0:3.11.59-1.git.52.3aa1c21.el7.x86_64 not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.59-1.git.0.7cb6277.el7.ppc64le atomic-openshift-node-0:3.11.59-1.git.0.7cb6277.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-node-0:3.11.59-1.git.0.7cb6277.el7.ppc64le not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-node-0:3.11.59-1.git.0.7cb6277.el7.x86_64 atomic-openshift-node-0:3.11.59-1.git.0.7cb6277.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-node-0:3.11.59-1.git.0.7cb6277.el7.x86_64 not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.59-1.git.254.339286b.el7.ppc64le atomic-openshift-node-problem-detector-0:3.11.59-1.git.254.339286b.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-node-problem-detector-0:3.11.59-1.git.254.339286b.el7.ppc64le not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.59-1.git.254.339286b.el7.src atomic-openshift-node-problem-detector-0:3.11.59-1.git.254.339286b.el7.src as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-node-problem-detector-0:3.11.59-1.git.254.339286b.el7.src not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-node-problem-detector-0:3.11.59-1.git.254.339286b.el7.x86_64 atomic-openshift-node-problem-detector-0:3.11.59-1.git.254.339286b.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-node-problem-detector-0:3.11.59-1.git.254.339286b.el7.x86_64 not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.59-1.git.0.7cb6277.el7.ppc64le atomic-openshift-pod-0:3.11.59-1.git.0.7cb6277.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-pod-0:3.11.59-1.git.0.7cb6277.el7.ppc64le not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-pod-0:3.11.59-1.git.0.7cb6277.el7.x86_64 atomic-openshift-pod-0:3.11.59-1.git.0.7cb6277.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-pod-0:3.11.59-1.git.0.7cb6277.el7.x86_64 not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.59-1.git.0.7cb6277.el7.ppc64le atomic-openshift-sdn-ovs-0:3.11.59-1.git.0.7cb6277.el7.ppc64le as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-sdn-ovs-0:3.11.59-1.git.0.7cb6277.el7.ppc64le not applicable csaf_redhat
7Server-RH7-RHOSE-3.11:atomic-openshift-sdn-ovs-0:3.11.59-1.git.0.7cb6277.el7.x86_64 atomic-openshift-sdn-ovs-0:3.11.59-1.git.0.7cb6277.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.11 not affected vulnerable code not present atomic-openshift-sdn-ovs-0:3.11.59-1.git.0.7cb6277.el7.x86_64 not applicable csaf_redhat
page 1 of 2 next →

A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.