CVE-2021-21671
Jenkins LTS 2.289.1 and earlier does not invalidate the previous session on login.
Original description
The description as published by the source.
Jenkins LTS 2.289.1 and earlier does not invalidate the previous session on login.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
jenkins
[{"type":"SEMVER","events":[{"introduced":"2.266.0"},{"fixed":"2.300.0"}]}]
References
- advisory openwall.com
- advisory jenkins.io
- web nvd.nist.gov