Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not check agent-to-controller access to create symbolic links when unarchiving a symbolic link in FilePath#untar.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: jenkins
Published: 2021-11-04T16:30:27
Updated: 2024-08-03T18:23:28.304Z
Reserved: 2021-01-04T00:00:00
Link: CVE-2021-21687
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2021-11-04T17:15:08.390
Modified: 2023-11-22T21:17:51.130
Link: CVE-2021-21687
Redhat