Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows users with Agent/Configure permission to choose agent names that cause Jenkins to override the global `config.xml` file.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Aug 22, 2024 | Jan 13, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 13, 2021 |
| Jenkins 2021 01 13 | — | Upgrade Jenkins LTS to the latest versionUpgrade Jenkins LTS to version 2.263.2Upgrade Jenkins to version 2.275Upgrade Jenkins to the latest version | Dec 2, 2021 | Jan 13, 2021 |
| Redhat Openshift | — | Upgrade python-oslo-configUpgrade python-sushyUpgrade ironic-images-ipa-ppc64leUpgrade redhat-release-coreosUpgrade jenkins-2-pluginsUpgrade butaneUpgrade openshift-kuryrUpgrade python-keystoneauth1Upgrade jenkinsUpgrade python-oslo-policyUpgrade podmanUpgrade python-oslo-dbUpgrade python-hardwareUpgrade atomic-openshift-service-idlerUpgrade openshift-clientsUpgrade python-pyrsistentUpgrade python-oslo-serializationUpgrade python-oslo-i18nUpgrade kata-containersUpgrade python-oslo-concurrencyUpgrade python-openshiftUpgrade ovn2.13Upgrade ironic-imagesUpgrade toolboxUpgrade openshift-ansibleUpgrade openstack-ironic-python-agentUpgrade python-eventletUpgrade python-toozUpgrade python-oslo-logUpgrade ironic-images-ipa-x86_64Upgrade openshiftUpgrade python-oslo-upgradecheckUpgrade ostreeUpgrade python-debtcollectorUpgrade python-ironic-prometheus-exporterUpgrade ignitionUpgrade python-oslo-serviceUpgrade python-jsonschemaUpgrade rust-afterburnUpgrade python-kubernetesUpgrade haproxyUpgrade python-sushy-oem-idracUpgrade cri-oUpgrade python-oslo-contextUpgrade conmonUpgrade openstack-ironicUpgrade runcUpgrade rteval-loadsUpgrade openvswitch2.15Upgrade python-stevedoreUpgrade python-openstacksdkUpgrade cri-toolsUpgrade machine-config-daemonUpgrade python-ironic-libUpgrade coreos-installerUpgrade console-login-helper-messagesUpgrade openstack-ironic-inspectorUpgrade python-oslo-utils | Feb 19, 2021 | Jan 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub