CVE-2021-21691
Creating symbolic links is possible without the 'symlink' agent-to-controller access control permission in Jenkins LTS 2.303.2 and earlier.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Creating symbolic links is possible without the 'symlink' agent-to-controller access control permission in Jenkins LTS 2.303.2 and earlier.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
jenkins
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.319.0"}]}]
参照URL
- advisory jenkins.io
- web nvd.nist.gov