by Kastro
Paper/Archive/CVE-2021-21697

CVE-2021-21697

Jenkins project Jenkins — Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenki…

EPSS 2%CVSS 9.1
critical.is priorityof 100
43
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 75.8.758 × 2015.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenkins with very few restrictions.

Affected

ProductAffectedFixed inSource
Jenkinsunspecified – 2.318–CNA
Jenkinsunspecified – LTS 2.303.2–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

refjenkins.io/security/advisory/2021-11-04/#SECURITY-2428refopenwall.com/lists/oss-security/2021/11/04/3