CVE-2021-21693

CRITICAL

Jenkins < 2.303.3 and < 2.319 - Incorrect Authorization in Temporary File Creation

Title source: llm

Description

When creating temporary files, agent-to-controller access to create those files is only checked after they've been created in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.

References (1)

Core 1

Core References

Vendor Advisory

https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455

Scores

CVSS v3 9.8

EPSS 0.0051

EPSS Percentile 66.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-863

Status published

Products (3)

jenkins/jenkins < 2.303.3

jenkins/jenkins < 2.319

org.jenkins-ci.main/jenkins-core 0 - 2.303.3Maven

Published Nov 04, 2021

Tracked Since Feb 18, 2026