Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows users with Agent/Configure permission to choose agent names that cause Jenkins to override the global `config.xml` file.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Aug 22, 2024 | Jan 13, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 13, 2021 |
| Jenkins 2021 01 13 | — | Upgrade Jenkins to version 2.275Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to version 2.263.2Upgrade Jenkins LTS to the latest version | Dec 2, 2021 | Jan 13, 2021 |
| Redhat Openshift | — | Upgrade python-stevedoreUpgrade python-ironic-libUpgrade ironic-images-ipa-x86_64Upgrade python-oslo-logUpgrade python-kubernetesUpgrade python-oslo-upgradecheckUpgrade cri-toolsUpgrade python-sushy-oem-idracUpgrade python-oslo-utilsUpgrade python-debtcollectorUpgrade rust-afterburnUpgrade ostreeUpgrade python-oslo-serviceUpgrade coreos-installerUpgrade openstack-ironicUpgrade python-jsonschemaUpgrade cri-oUpgrade conmonUpgrade console-login-helper-messagesUpgrade runcUpgrade openshiftUpgrade haproxyUpgrade ignitionUpgrade python-oslo-contextUpgrade python-ironic-prometheus-exporterUpgrade rteval-loadsUpgrade machine-config-daemonUpgrade openvswitch2.15Upgrade openstack-ironic-inspectorUpgrade python-openstacksdkUpgrade kata-containersUpgrade python-oslo-policyUpgrade jenkins-2-pluginsUpgrade python-oslo-dbUpgrade python-sushyUpgrade atomic-openshift-service-idlerUpgrade toolboxUpgrade python-openshiftUpgrade ovn2.13Upgrade python-hardwareUpgrade python-oslo-i18nUpgrade jenkinsUpgrade ironic-images-ipa-ppc64leUpgrade python-oslo-configUpgrade python-keystoneauth1Upgrade python-oslo-serializationUpgrade butaneUpgrade python-eventletUpgrade openstack-ironic-python-agentUpgrade python-toozUpgrade openshift-ansibleUpgrade ironic-imagesUpgrade python-pyrsistentUpgrade python-oslo-concurrencyUpgrade openshift-kuryrUpgrade podmanUpgrade openshift-clientsUpgrade redhat-release-coreos | Feb 19, 2021 | Jan 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub