CVE-2021-21689

🗓️ 04 Nov 2021 16:30:30Reported by jenkinsType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 155 Views

Jenkins CVE-2021-21689 allows unrestricted access

Reporter	Title	Published	Views	Family All 49
FreeBSD	jenkins -- multiple vulnerabilities	4 Nov 202100:00	–	freebsd
AlpineLinux	CVE-2021-21689	4 Nov 202117:15	–	alpinelinux
ArchLinux	[ASA-202111-1] jenkins: multiple issues	5 Nov 202100:00	–	archlinux
BDU FSTEC	The vulnerability of the Jenkins automation server, related to the absence of authentication procedures, allows attackers to compromise the confidentiality and integrity of the protected information.	4 Jan 202200:00	–	bdu_fstec
Circl	CVE-2021-21689	4 Nov 202119:25	–	circl
Tenable Nessus	Jenkins Enterprise and Operations Center < 2.277.43.0.2 / 2.303.3.3 Multiple Vulnerabilities (CloudBees Security Advisory 2021-11-04)	19 Nov 202100:00	–	nessus
Tenable Nessus	FreeBSD : jenkins -- multiple vulnerabilities (2bf56269-90f8-4a82-b82f-c0e289f2a0dc)	5 Nov 202100:00	–	nessus
Tenable Nessus	Jenkins LTS < 2.303.3 / Jenkins weekly < 2.319 Multiple Vulnerabilities	4 Nov 202100:00	–	nessus
Tenable Nessus	RHEL 8 : OpenShift Container Platform 4.6.51 (RHSA-2021:4799)	3 Dec 202100:00	–	nessus
Tenable Nessus	RHEL 8 : OpenShift Container Platform 4.7.38 (RHSA-2021:4801)	2 Dec 202100:00	–	nessus

NVD

Node

jenkins jenkinsRange<2.303.3lts

jenkins jenkinsRange<2.319-

[
  {
    "product": "Jenkins",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThanOrEqual": "2.318",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "LTS 2.303.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
jenkins	www.jenkins.io/security/advisory/2021-11-04/

17 Jun 2026 03:36Current

9.2High risk

Vulners AI Score9.2

CVSS 26.4

CVSS 3.19.1

EPSS0.01416