Jenkins
Jenkins Security Advisory 2021-04-07
2021-04-07 Apr 7, 2021 Source: Vendor
Imported by the Jenkins advisory catcher from https://www.jenkins.io/security/advisory/2021-04-07/. 6 SECURITY issues listed. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.jenkins.io/security/advisory/2021-04-07/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
6 lines
Showing 1–6 of 6
CVE-2021-21641
BR2021-0000-013330
SECURITY-2293
unclaimed
CSRF vulnerability in promoted builds Plugin
Credited as Ildefonso Montero Pérez, CloudBees, Inc.
CVE-2021-21641
BR2021-0000-013331
SECURITY-2293
unclaimed
CSRF vulnerability in promoted builds Plugin
Credited as Daniel Beck, CloudBees, Inc.
CVE-2021-21639
BR2021-0000-013332
SECURITY-1721
unclaimed
Lack of type validation in agent related REST API
Credited as Jeff Thompson, CloudBees, Inc.
CVE-2021-22512
BR2021-0000-013333
SECURITY-2132
unclaimed
CSRF vulnerability and missing permission checks in OpenText Application Automation Tools Plugin
Credited as Long Nguyen, Viettel Cyber Security
CVE-2021-22510
BR2021-0000-013334
SECURITY-2175
unclaimed
Reflected XSS vulnerability in OpenText Application Automation Tools Plugin
Credited as Wadeck Follonier, CloudBees, Inc.
CVE-2021-22511
BR2021-0000-013335
SECURITY-2176
unclaimed
SSL/TLS certificate validation unconditionally disabled by OpenText Application Automation Tools Plugin
Credited as Wadeck Follonier, CloudBees, Inc.