Description

Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenkins with very few restrictions.

Remediation

References

CVE-2021-21697

Related Vulnerabilities

WordPress Plugin Boozang Cross-Site Scripting (1.1)

Joomla Improper Preservation of Permissions Vulnerability (CVE-2020-13763)

Moodle Other Vulnerability (CVE-2012-2366)

Grafana Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-43813)

Roundcube Unspesificed Vulnerability (CVE-2018-1000071)

Severity

Critical

Classification

CVE-2021-21697 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Tags

Missing Update Known Vulnerabilities