Lucene search
Alpine Linux Development TeamALPINE:CVE-2021-21687HistoryNov 04, 2021 - 5:15 p.m.
CVE-2021-21687
2021-11-0417:15:00
Alpine Linux Development Team
security.alpinelinux.org
14
0.002 Low
EPSS
Percentile
55.6%
Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not check agent-to-controller access to create symbolic links when unarchiving a symbolic link in FilePath#untar.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.14-community | noarch | jenkins | = 2.297-r0 | UNKNOWN |
| Alpine | 3.15-community | noarch | jenkins | = 2.307-r0 | UNKNOWN |
Related
cve
cve
CVE-2021-21687
2021-11-04 17:15:08
osv
osv
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
2022-05-24 19:19:44
BIT-jenkins-2021-21687
2024-03-06 11:00:49
CVE-2021-21687
2021-11-04 17:15:08
cnvd
cnvd
Jenkins has an unspecified vulnerability (CNVD-2021-88719)
2021-11-08 00:00:00
cvelist
cvelist
CVE-2021-21687
2021-11-04 16:30:27
nvd
nvd
CVE-2021-21687
2021-11-04 17:15:08
redhatcve
redhatcve
CVE-2021-21687
2021-11-04 16:52:21
veracode
veracode
Privilege Escalation
2021-12-04 00:41:06
prion
prion
Design/Logic Flaw
2021-11-04 17:15:00
github
github
openvas
openvas
Jenkins < 2.303.3, < 2.319 Multiple Vulnerabilities - Windows
2021-11-05 00:00:00
Jenkins < 2.303.3, < 2.319 Multiple Vulnerabilities - Linux
2021-11-05 00:00:00
archlinux
archlinux
[ASA-202111-1] jenkins: multiple issues
2021-11-05 00:00:00
nessus
nessus
Jenkins LTS < 2.303.3 / Jenkins weekly < 2.319 Multiple Vulnerabilities
2021-11-04 00:00:00
RHEL 8 : OpenShift Container Platform 4.8.22 (RHSA-2021:4829)
2021-12-01 00:00:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2021-11-04 00:00:00
redhat
redhat