CVE-2021-21670

Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even…

published June 30, 2021

CVSS
—
EPSS
2%
Percentile
80.9
In the wild
Unconfirmed
What it is

Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read permission.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02038 · 80.9th percentile
Published
2021-06-30T16:45Z
EPSS history
Timeline
  • 30 JUN 16:45Z
    Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even…
    cvelistv5