Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows users with Agent/Configure permission to choose agent names that cause Jenkins to override the global `config.xml` file.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Aug 22, 2024 | Jan 13, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 13, 2021 |
| Jenkins 2021 01 13 | — | Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to version 2.263.2Upgrade Jenkins to version 2.275Upgrade Jenkins LTS to the latest version | Dec 2, 2021 | Jan 13, 2021 |
| Redhat Openshift | — | Upgrade python-debtcollectorUpgrade python-oslo-utilsUpgrade cri-toolsUpgrade runcUpgrade python-sushy-oem-idracUpgrade ironic-images-ipa-x86_64Upgrade machine-config-daemonUpgrade ignitionUpgrade python-oslo-contextUpgrade rteval-loadsUpgrade python-oslo-serviceUpgrade ostreeUpgrade openstack-ironicUpgrade openvswitch2.15Upgrade python-ironic-libUpgrade coreos-installerUpgrade python-oslo-logUpgrade openshiftUpgrade conmonUpgrade haproxyUpgrade python-jsonschemaUpgrade python-oslo-upgradecheckUpgrade python-kubernetesUpgrade openstack-ironic-inspectorUpgrade rust-afterburnUpgrade python-stevedoreUpgrade cri-oUpgrade python-openstacksdkUpgrade python-ironic-prometheus-exporterUpgrade console-login-helper-messagesUpgrade python-oslo-i18nUpgrade atomic-openshift-service-idlerUpgrade jenkins-2-pluginsUpgrade python-oslo-policyUpgrade openshift-kuryrUpgrade python-sushyUpgrade openstack-ironic-python-agentUpgrade openshift-clientsUpgrade python-eventletUpgrade openshift-ansibleUpgrade python-pyrsistentUpgrade python-toozUpgrade kata-containersUpgrade ironic-images-ipa-ppc64leUpgrade redhat-release-coreosUpgrade python-keystoneauth1Upgrade ironic-imagesUpgrade python-openshiftUpgrade python-oslo-concurrencyUpgrade python-oslo-configUpgrade ovn2.13Upgrade jenkinsUpgrade toolboxUpgrade butaneUpgrade python-oslo-serializationUpgrade podmanUpgrade python-oslo-dbUpgrade python-hardware | Feb 19, 2021 | Jan 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub