CVE-2021-21671

2021-06-3016:45:17

jenkins

www.cve.org

cve-2021-21671

jenkins

lts 2.289.1

session

EPSS

0.003

Percentile

69.8%

JSON

Jenkins 2.299 and earlier, LTS 2.289.1 and earlier does not invalidate the previous session on login.

CNA Affected

[
  {
    "product": "Jenkins",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2.266",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "LTS 2.277.1",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2.299",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "LTS 2.289.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]