Description
Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, because the fix for CVE-2019-1003004 in these releases did not reject existing remoting-based CLI authentication caches.
Remediation
References
Related Vulnerabilities
Sqlite Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-19925)
WordPress Plugin WP Fastest Cache Arbitrary File Deletion (0.8.9.0)
MySQL CVE-2020-14793 Vulnerability (CVE-2020-14793)
WordPress Plugin SEO Redirection-301 Redirect Manager Unspecified Vulnerability (8.7)
WordPress Improper Input Validation Vulnerability (CVE-2009-2431)