Download
| Alert*
|
oval:org.secpod.oval:def:1801971
*CVE-2021-21639: Lack of type validation in agent related REST API Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the config.xml REST API endpoint of a node. This allows attackers with Computer/Configure permission ... oval:org.secpod.oval:def:71779 The host is installed with Jenkins LTS through 2.277.1 or Jenkins rolling release through 2.286 and is prone to a view name validation bypass vulnerability. A flaw is present in the application, which fails to properly check that a newly created view has an allowed name. Successful exploitation allo ... oval:org.secpod.oval:def:71777 The host is installed with Jenkins LTS through 2.277.1 or Jenkins rolling release through 2.286 and is prone to a view name validation bypass vulnerability. A flaw is present in the application, which fails to properly check that a newly created view has an allowed name. Successful exploitation allo ... |
