CVE-2021-21697 — Jenkins project / Jenkins

CVE-2021-21697

Jenkins project / Jenkins PUBLISHED

Description (CNA)

Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenkins with very few restrictions.

Affected (CNA)

Vendor / product	Versions
Jenkins project / Jenkins	affected unspecified through 2.318; affected unspecified through LTS 2.303.2

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2428
http://www.openwall.com/lists/oss-security/2021/11/04/3

ADP enrichment

CVE

No English description supplied.

https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2428
http://www.openwall.com/lists/oss-security/2021/11/04/3