CVE-2021-21697

2021-11-0416:30:43

jenkins

www.cve.org

jenkins

vulnerability

unauthorized access

build directories

restrictions

AI Score

9.4

Confidence

High

EPSS

0.002

Percentile

55.4%

JSON

Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenkins with very few restrictions.

CNA Affected

[
  {
    "product": "Jenkins",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThanOrEqual": "2.318",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "LTS 2.303.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]