Skip to content
Sign in
Not rated

CVE-2021-21623 An incorrect permission check in Jenkins Matrix Authorization Strategy Plugin 2.6.5 and earlier allows attackers with…

Description

An incorrect permission check in Jenkins Matrix Authorization Strategy Plugin 2.6.5 and earlier allows attackers with Item/Read permission on nested items to access them, even if they lack Item/Read permission for parent folders.

Affected products and versions

Product Affected versions Fixed in
Jenkins Matrix Authorization Strategy Plugin 2.6 earliest → 2.6.5 2.6.3.1
Jenkins Matrix Authorization Strategy Plugin 2.5 earliest → < 2.5.2 2.5.2

Other CVEs of Jenkins Matrix Authorization Strategy Plugin

The 3 CVEs of Jenkins Matrix Authorization Strategy Plugin →
CVE-2026-42521 Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) invokes parameterless… 6.5 Medium CVE-2020-2226 Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration,… Not rated
Track this CVE