Skip to content
Sign in
Not rated

CVE-2021-21647 Jenkins CloudBees CD Plugin 1.1.21 and earlier does not perform a permission check in an HTTP endpoint, allowing…

Description

Jenkins CloudBees CD Plugin 1.1.21 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Item/Read permission to schedule builds of projects without having Item/Build permission.

Affected products and versions

Product Affected versions Fixed in
Jenkins CloudBees CD Plugin 1.1 earliest → 1.1.21 1.1.18.1

Other CVEs of Jenkins CloudBees CD Plugin

The 3 CVEs of Jenkins CloudBees CD Plugin →
CVE-2023-46655 Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the directory from which… Not rated CVE-2023-46654 Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the expected directory… Not rated
Track this CVE