Jenkins
Jenkins Security Advisory 2021-04-07
2021-04-07 Apr 7, 2021 Source: Vendor
Imported by the Jenkins advisory catcher from https://www.jenkins.io/security/advisory/2021-04-07/. 6 SECURITY issues listed. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.jenkins.io/security/advisory/2021-04-07/
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
6 lines
Showing 1–6 of 6
CVE-2021-21641
BR2021-0000-013330
SECURITY-2293
unclaimed
CSRF vulnerability in promoted builds Plugin
Credited as Ildefonso Montero Pérez, CloudBees, Inc.
CVE-2021-21641
BR2021-0000-013331
SECURITY-2293
unclaimed
CSRF vulnerability in promoted builds Plugin
Credited as Daniel Beck, CloudBees, Inc.
CVE-2021-21639
BR2021-0000-013332
SECURITY-1721
unclaimed
Lack of type validation in agent related REST API
Credited as Jeff Thompson, CloudBees, Inc.
CVE-2021-22512
BR2021-0000-013333
SECURITY-2132
unclaimed
CSRF vulnerability and missing permission checks in OpenText Application Automation Tools Plugin
Credited as Long Nguyen, Viettel Cyber Security
CVE-2021-22510
BR2021-0000-013334
SECURITY-2175
unclaimed
Reflected XSS vulnerability in OpenText Application Automation Tools Plugin
Credited as Wadeck Follonier, CloudBees, Inc.
CVE-2021-22511
BR2021-0000-013335
SECURITY-2176
unclaimed
SSL/TLS certificate validation unconditionally disabled by OpenText Application Automation Tools Plugin
Credited as Wadeck Follonier, CloudBees, Inc.