Lucene search
GoogleOSV:CVE-2021-21696HistoryNov 04, 2021 - 5:15 p.m.
CVE-2021-21696
2021-11-0417:15:08
Google
osv.dev
6
Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not limit agent read/write access to the libs/ directory inside build directories when using the FilePath APIs, allowing attackers in control of agent processes to replace the code of a trusted library with a modified variant. This results in unsandboxed code execution in the Jenkins controller process.
Related
cve
cve
CVE-2021-21696
2021-11-04 17:15:08
prion
prion
Code injection
2021-11-04 17:15:00
redhatcve
redhatcve
CVE-2021-21696
2021-11-04 16:52:28
alpinelinux
alpinelinux
CVE-2021-21696
2021-11-04 17:15:00
veracode
veracode
Privilege Escalation
2021-12-08 00:41:03
cnvd
cnvd
Jenkins Access Control Error Vulnerability (CNVD-2021-103366)
2021-11-06 00:00:00
github
github
osv
osv
Agent-to-controller access control allowed writing to sensitive directory used by Jenkins Pipeline: Shared Groovy Libraries Plugin
2022-05-24 19:19:43
BIT-jenkins-2021-21696
2024-03-06 10:59:13
cvelist
cvelist
CVE-2021-21696
2021-11-04 16:30:41
nvd
nvd
CVE-2021-21696
2021-11-04 17:15:08
openvas
openvas
Jenkins < 2.303.3, < 2.319 Multiple Vulnerabilities - Windows
2021-11-05 00:00:00
Jenkins < 2.303.3, < 2.319 Multiple Vulnerabilities - Linux
2021-11-05 00:00:00
archlinux
archlinux
[ASA-202111-1] jenkins: multiple issues
2021-11-05 00:00:00
nessus
nessus
FreeBSD : jenkins -- multiple vulnerabilities (2bf56269-90f8-4a82-b82f-c0e289f2a0dc)
2021-11-05 00:00:00
RHEL 8 : OpenShift Container Platform 4.7.38 (RHSA-2021:4801)
2021-12-02 00:00:00
RHEL 8 : OpenShift Container Platform 4.9.9 (RHSA-2021:4833)
2021-11-30 00:00:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2021-11-04 00:00:00
redhat
redhat