RHSA-2025:15812HighCVSS 8.8

Red Hat Security Advisory: Red Hat Product OCP Tools 4.19 OpenShift Jenkins security update

Published
September 15, 2025
Last Modified
October 9, 2026

🔗 CVE IDs covered (1)

📋 Description

CVE-2025-48734 — commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

🎯 Affected products5

  • OpenShift Developer Tools and Services for OCP 4.19
  • jenkins-0:2.516.2.1756903379-3.el9.noarch as a component of OpenShift Developer Tools and Services for OCP 4.19
  • jenkins-0:2.516.2.1756903379-3.el9.src as a component of OpenShift Developer Tools and Services for OCP 4.19
  • jenkins-2-plugins-0:4.19.1756901647-1.el9.noarch as a component of OpenShift Developer Tools and Services for OCP 4.19
  • jenkins-2-plugins-0:4.19.1756901647-1.el9.src as a component of OpenShift Developer Tools and Services for OCP 4.19

✅ Remediation

For more information on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (4)