CVEvulnerability
CVE-2021-21697
9.1 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2021-11-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Description
Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenkins with very few restrictions.
Affected configurations
• jenkins jenkins (<= 2.303.2)
• jenkins jenkins (<= 2.318)
References
- http://www.openwall.com/lists/oss-security/2021/11/04/3 Mailing List, Third Party Advisory
- https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2428 Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2021/11/04/3 Mailing List, Third Party Advisory
- https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2428 Patch, Vendor Advisory