View name validation bypass in Jenkins

🗓️ 24 May 2022 17:46:47Reported by GitHub Advisory DatabaseType

View name validation bypass in Jenkins. Allows attackers to create views with invalid or existing name

Reporter	Title	Published	Views	Family All 32
FreeBSD	jenkins -- multiple vulnerabilities	7 Apr 202100:00	–	freebsd
AlpineLinux	CVE-2021-21640	7 Apr 202113:50	–	alpinelinux
Tenable Nessus	Jenkins Enterprise and Operations Center < 2.222.43.0.4 / 2.249.30.0.4 / 2.277.2.3 Multiple Vulnerabilities (CloudBees Security Advisory 2021-04-07)	18 Nov 202100:00	–	nessus
Tenable Nessus	FreeBSD : jenkins -- multiple vulnerabilities (9595d002-edeb-4602-be2d-791cd654247e)	14 Apr 202100:00	–	nessus
Tenable Nessus	Jenkins LTS < 2.277.2 / Jenkins weekly < 2.287 Multiple Vulnerabilities	9 Apr 202100:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : OpenShift Container Platform 4.7.11 (RHSA-2021:1551)	20 May 202100:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : OpenShift Container Platform 4.8.2 (RHSA-2021:2437)	27 Jul 202100:00	–	nessus
Tenable Nessus	RHCOS 4 : OpenShift Container Platform 4.7.11 (RHSA-2021:1551)	6 May 202600:00	–	nessus
Tenable Nessus	RHCOS 4 : OpenShift Container Platform 4.8.2 (RHSA-2021:2437)	6 May 202600:00	–	nessus
CNNVD	Jenkins 安全漏洞	7 Apr 202100:00	–	cnnvd

Vulners

Node

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-21640
jenkins	www.jenkins.io/security/advisory/2021-04-07/
openwall	www.openwall.com/lists/oss-security/2021/04/07/2
github	www.github.com/jenkinsci/jenkins/commit/42e2c74049ddf5e0aca1fe6aadc7b24fdabb5494
github	www.github.com/advisories/GHSA-w2hv-rcqr-2h7r

07 Dec 2023 12:52Current

2.9Low risk

Vulners AI Score2.9

CVSS 24

CVSS 3.14.3

EPSS0.00703