CVE-2021-21671
Jenkins LTS 2.289.1 and earlier does not invalidate the previous session on login.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Jenkins LTS 2.289.1 and earlier does not invalidate the previous session on login.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
jenkins
[{"type":"SEMVER","events":[{"introduced":"2.266.0"},{"fixed":"2.300.0"}]}]
Références
- advisory openwall.com
- advisory jenkins.io
- web nvd.nist.gov