VDB

CVE-2021-21670

CVE-2021-21670 PUBLISHED CVSS 4.300000190734863 MEDIUM

Jenkins LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read permission.

EPSS 1.98% · 78.9th percentile

Risk Scores

CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS Score
1.98%
78.9th percentile

Affected Products

VendorProductVersions
Bitnamijenkins0
Bitnamijenkins0

Timeline

  • Jun 30, 2021 CVE Published
  • Jul 1, 2021 EPSS Score
  • Aug 30, 2021 EPSS Score
  • Oct 7, 2021 EPSS Score
  • Dec 29, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 27, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Jun 27, 2022 EPSS Score
  • Aug 27, 2022 EPSS Score
  • Dec 26, 2022 EPSS Score
  • Feb 24, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›