RHSA-2025:15817HighCVSS 8.8
Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2025-48734 — commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default
🎯 Affected products5
- OpenShift Developer Tools and Services for OCP 4.15
- jenkins-0:2.516.2.1756738247-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.15
- jenkins-0:2.516.2.1756738247-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.15
- jenkins-2-plugins-0:4.15.1756735456-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.15
- jenkins-2-plugins-0:4.15.1756735456-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.15
✅ Remediation
For more information on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258