CVE-2021-21621 Vulnerability Details

  /     /     /  

CVE-2021-21621 Metadata Quick Info

CVE Published: 24/02/2021 | CVE Updated: 03/08/2024 | CVE Year: 2021
Source: jenkins | Vendor: Jenkins project | Product: Jenkins Support Core Plugin
Status : PUBLISHED

---

CVE-2021-21621 Description

Jenkins Support Core Plugin 2.72 and earlier provides the serialized user authentication as part of the "About user (basic authentication details only)" information, which can include the session ID of the user creating the support bundle in some configurations.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name:
Source: Jenkins project

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).