CVE-2021-21671

Published: Jun 30, 2021

Modified: Aug 3, 2024

PUBLISHED

Jenkins 2.299 and earlier, LTS 2.289.1 and earlier does not invalidate the previous session on login.

Vendor	Product	Versions
Jenkins project	Jenkins	affected `2.266 - < unspecified` affected `LTS 2.277.1 - < unspecified` affected `unspecified - <= 2.299` affected `unspecified - <= LTS 2.289.1`

x_refsource_CONFIRM

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.