Lucene search
+L

6 matches found

RedHat Linux
RedHat Linux
•added 2021/12/02 10:04 p.m.•16 views

jenkins: FilePath#listFiles lists files outside directories with agent read access when following symbolic links.

An incorrect permissions validation vulnerability was found in Jenkins. The FilePathlistFiles lists files outside directories with agent read access when following symbolic links. This may allow an attacker to get access to restricted data...

8.8CVSS5.7AI score0.02145EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/11/30 9:11 a.m.•21 views

jenkins: FilePath#listFiles lists files outside directories with agent read access when following symbolic links.

An incorrect permissions validation vulnerability was found in Jenkins. The FilePathlistFiles lists files outside directories with agent read access when following symbolic links. This may allow an attacker to get access to restricted data...

8.8CVSS5.7AI score0.02145EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/11/29 10:40 a.m.•11 views

jenkins: FilePath#listFiles lists files outside directories with agent read access when following symbolic links.

An incorrect permissions validation vulnerability was found in Jenkins. The FilePathlistFiles lists files outside directories with agent read access when following symbolic links. This may allow an attacker to get access to restricted data...

8.8CVSS5.7AI score0.02145EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2021/11/04 5:15 p.m.•7 views

CVE-2021-21695

FilePathlistFiles lists files outside directories that agents are allowed to access when following symbolic links in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier...

8.8CVSS7.2AI score0.02145EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/11/04 4:52 p.m.•35 views

CVE-2021-21695

An incorrect permissions validation vulnerability was found in Jenkins. The FilePathlistFiles lists files outside directories with agent read access when following symbolic links. This may allow an attacker to get access to restricted data. Mitigation Red Hat has investigated whether a possible...

9CVSS8.5AI score0.02145EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/04 12:00 a.m.•1 views

CVE-2021-21695: Improper Link Resolution Before File Access

FilePathlistFiles lists files outside directories that agents are allowed to access when following symbolic links in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier...

8.8CVSS5.8AI score0.02145EPSS
SaveExploits0References2
Rows per page
Query Builder