Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Jenkins Incorrect Authorization Vulnerability - CVE-2021-21609 - Vulnerability Database
Jenkins

Jenkins Incorrect Authorization Vulnerability - CVE-2021-21609

Medium
Reference: CVE-2021-21609
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-21609
Title: Jenkins Incorrect Authorization Vulnerability
Overview:

Jenkins 2.274 and earlier LTS 2.263.1 and earlier does not correctly match requested URLs to the list of always accessible paths allowing attackers without Overall/Read permission to access some URLs as if they did have Overall/Read permission.