jenkins: view name validation bypass

🗓️ 27 Jul 2021 22:36:55Reported by RedHatType

Jenkins view name validation bypass allows attackers with View/Create permission to create views with invalid or used names.

Reporter	Title	Published	Views	Family All 33
FreeBSD	jenkins -- multiple vulnerabilities	7 Apr 202100:00	–	freebsd
AlpineLinux	CVE-2021-21640	7 Apr 202113:50	–	alpinelinux
Tenable Nessus	Jenkins Enterprise and Operations Center < 2.222.43.0.4 / 2.249.30.0.4 / 2.277.2.3 Multiple Vulnerabilities (CloudBees Security Advisory 2021-04-07)	18 Nov 202100:00	–	nessus
Tenable Nessus	FreeBSD : jenkins -- multiple vulnerabilities (9595d002-edeb-4602-be2d-791cd654247e)	14 Apr 202100:00	–	nessus
Tenable Nessus	Jenkins LTS < 2.277.2 / Jenkins weekly < 2.287 Multiple Vulnerabilities	9 Apr 202100:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : OpenShift Container Platform 4.7.11 (RHSA-2021:1551)	20 May 202100:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : OpenShift Container Platform 4.8.2 (RHSA-2021:2437)	27 Jul 202100:00	–	nessus
Tenable Nessus	RHCOS 4 : OpenShift Container Platform 4.7.11 (RHSA-2021:1551)	6 May 202600:00	–	nessus
Tenable Nessus	RHCOS 4 : OpenShift Container Platform 4.8.2 (RHSA-2021:2437)	6 May 202600:00	–	nessus
CNNVD	Jenkins 安全漏洞	7 Apr 202100:00	–	cnnvd

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	8	noarch	jenkins	2.289.1.1624020353-1.el8	jenkins-2.289.1.1624020353-1.el8.noarch.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2021-21640
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-21640
cve	www.cve.org/CVERecord

28 Jun 2026 08:51Current

5.7Medium risk

Vulners AI Score5.7

CVSS 24

CVSS 3.14.3

EPSS0.01905