BIT-jenkins-2021-21697

vendorUSosv

view advisory published 2024-03-06Licence: per source

Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenkins with very few restrictions.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-21697US	critical9.1	1.60% (76th)	—	2021-11-04
Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenkins with very few restrictions.

references

External citations — patches, advisories, analysis.

http://www.openwall.com/lists/oss-security/2021/11/04/3ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2021-21697WEB
https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2428ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan