CVE-2021-21682 — Vulnetix

CVE-2021-21682 PUBLISHED

Jenkins 2.314 and earlier, LTS 2.303.1 and earlier accepts names of jobs and other entities with a trailing dot character, potentially replacing the configuration and data of other entities on Windows.

EPSS 0.22% · 44.9th percentile

Risk Scores

EPSS Score

0.22%

44.9th percentile

Affected Products

Vendor	Product	Versions
Bitnami	jenkins	0
Bitnami	jenkins	0

Exploit Intelligence

https://www.jenkins.io/security/advisory/2021-10-06/#SECURITY-2424 (circl)
[oss-security] 20211006 Multiple vulnerabilities in Jenkins and Jenkins plugins (circl)

Timeline

Oct 6, 2021 CVE Published
Oct 7, 2021 EPSS Score
Oct 20, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Jan 28, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Mar 26, 2022 EPSS Score
May 22, 2022 EPSS Score
Jul 19, 2022 EPSS Score
Sep 13, 2022 EPSS Score
Nov 9, 2022 EPSS Score
Mar 3, 2023 EPSS Score

References

http://www.openwall.com/lists/oss-security/2021/10/06/1 url
https://www.jenkins.io/security/advisory/2021-10-06/#SECURITY-2424 url
https://nvd.nist.gov/vuln/detail/CVE-2021-21682 url

Open in Interactive Console →