• Type: Bug
• Resolution: Fixed
• Priority: Critical
• Component/s: hp-application-automation-tools-plugin
• Labels:

  • CVE-2021-44228
  • CVE-2021-45046
  • jcabot:001
  • jcabot:002
  • security

[JENKINS-67357] log4j dependency has critical vulnerability CVE-2021-44228 in Micro Focus Application Automation Tools Plugin

Daniel Beck created issue - 2021-12-11 09:31

José María Palma made changes - 2021-12-11 16:25

Priority

Original: Minor [ 4 ]

New: Critical [ 2 ]

Zhipeng made changes - 2021-12-13 08:20

Assignee

Original: Paul-Adrian Tofan [ ptofan ]

New: Zhipeng [ zhipengwa ]

Zhipeng made changes - 2021-12-15 04:57

Status

Original: Open [ 1 ]

New: In Progress [ 3 ]

Wadeck Follonier made changes - 2021-12-15 08:41

Description

Original: See JENKINS-67353

New: See JENKINS-67353 (!) Update to 2.15 is not sufficient due to https://nvd.nist.gov/vuln/detail/CVE-2021-45046, it requires 2.16. This one is less important but will still be detected by scanners and alert all users.

Wadeck Follonier made changes - 2021-12-15 08:51

Labels

Original: CVE-2021-44228 security

New: CVE-2021-44228 CVE-2021-45046 security

Zhipeng made changes - 2021-12-20 02:40

Status

Original: In Progress [ 3 ]

New: Open [ 1 ]

Zhipeng made changes - 2021-12-20 02:41

Resolution		New: Fixed [ 1 ]
Status	Original: Open [ 1 ]	New: Fixed but Unreleased [ 10203 ]

Zhipeng made changes - 2021-12-20 02:41

Status

Original: Fixed but Unreleased [ 10203 ]

New: Resolved [ 5 ]

Bill Hopper made changes - 2021-12-20 06:09

Resolution	Original: Fixed [ 1 ]
Status	Original: Resolved [ 5 ]	New: In Review [ 10005 ]

Bill Hopper made changes - 2021-12-20 06:12

Status

Original: In Review [ 10005 ]

New: In Progress [ 3 ]

Load more newer history items