CVE-2021-21691 PUBLISHED

Creating symbolic links is possible without the 'symlink' agent-to-controller access control permission in Jenkins LTS 2.303.2 and earlier.

EPSS 0.64% · 70.3th percentile

Risk Scores

EPSS Score
0.64%
70.3th percentile

Affected Products

VendorProductVersions
Bitnamijenkins0
Bitnamijenkins0

Timeline

References

Open in Interactive Console →