Description

Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenkins with very few restrictions.

Remediation

References

CVE-2021-21697

Related Vulnerabilities

WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.27)

WordPress Plugin Marketo Forms and Tracking Cross-Site Request Forgery (1.0.2)

WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.5)

OpenSSL Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2015-3216)

MySQL CVE-2019-2614 Vulnerability (CVE-2019-2614)

Severity

Critical

Classification

CVE-2021-21697 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Tags

Missing Update Known Vulnerabilities