Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

CVE-2021-21640

Related Vulnerabilities: CVE-2021-21640  

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name, allowing attackers with View/Create permission to create views with invalid or already-used names.

Source

Description

The MITRE CVE dictionary describes this issue as:

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name, allowing attackers with View/Create permission to create views with invalid or already-used names.

Additional Information

  • Bugzilla 1947105: CVE-2021-21640 jenkins: view name validation bypass
  • CWE-863: Incorrect Authorization
  • FAQ: Frequently asked questions about CVE-2021-21640

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook

Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started