Jenkins Incorrect Authorization Vulnerability - CVE-2021-21670 - Vulnerability Database

Jenkins Incorrect Authorization Vulnerability - CVE-2021-21670

Medium

Reference: CVE-2021-21670

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-21670

Title: Jenkins Incorrect Authorization Vulnerability

Overview:

Jenkins 2.299 and earlier LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read permission.