Download
| Alert*
|
oval:org.secpod.oval:def:1801971
*CVE-2021-21639: Lack of type validation in agent related REST API Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the config.xml REST API endpoint of a node. This allows attackers with Computer/Configure permission ... oval:org.secpod.oval:def:71778 The host is installed with Jenkins LTS through 2.277.1 or Jenkins rolling release through 2.286 and is prone to an improper input validation vulnerability. A flaw is present in the application, which fails to properly handle an object type validation issue. Successful exploitation allows attackers w ... oval:org.secpod.oval:def:71776 The host is installed with Jenkins LTS through 2.277.1 or Jenkins rolling release through 2.286 and is prone to an improper input validation vulnerability. A flaw is present in the application, which fails to properly handle an object type validation issue. Successful exploitation allows attackers w ... |
