RHSA-2025:15814HighCVSS 8.8

Red Hat Security Advisory: Red Hat Product OCP Tools 4.17 OpenShift Jenkins security update

Published
September 15, 2025
Last Modified
October 9, 2026

🔗 CVE IDs covered (1)

CVE-2025-48734 →

📋 Description

CVE-2025-48734 — commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

🎯 Affected products5

  • OpenShift Developer Tools and Services for OCP 4.17
  • jenkins-0:2.516.2.1756732303-3.el9.noarch as a component of OpenShift Developer Tools and Services for OCP 4.17
  • jenkins-0:2.516.2.1756732303-3.el9.src as a component of OpenShift Developer Tools and Services for OCP 4.17
  • jenkins-2-plugins-0:4.17.1756732064-1.el9.noarch as a component of OpenShift Developer Tools and Services for OCP 4.17
  • jenkins-2-plugins-0:4.17.1756732064-1.el9.src as a component of OpenShift Developer Tools and Services for OCP 4.17

✅ Remediation

For more information on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (4)