Security Lab

Множественные уязвимости в Jenkins and Jenkins LTS

Дата публикации:14.01.2021
Всего просмотров:980
Опасность:
Средняя
Наличие исправления: Да
Количество уязвимостей:10
CVSSv3.1 рейтинг: 6.4 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C]
3.7 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]
6.5 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
4.3 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]
5.5 [CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C]
6.5 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
8 [CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
6.4 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C]
6.1 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C]
5.4 [CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE ID: CVE-2021-21608
CVE-2021-21609
CVE-2021-21607
CVE-2021-21606
CVE-2021-21605
CVE-2021-21602
CVE-2021-21604
CVE-2021-21611
CVE-2021-21610
CVE-2021-21603
Вектор эксплуатации: Удаленная
Воздействие: Межсайтовый скриптинг
Раскрытие важных данных
Обход ограничений безопасности
Компрометация системы
CWE ID: Нет данных
Наличие эксплоита: Нет данных
Уязвимые продукты: jenkins-statsd
Jenkins LTS
Jenkins CI
Jenkins 1.x
Уязвимые версии: Jenkins версии 2.274, 2.273, 2.272, 2.263.2, 2.271, 2.270, 2.263.1, 2.269, 2.268, 2.267, 2.266, 2.249.3, 2.265, 2.264, 2.263, 2.262, 2.261, 2.249.2, 2.260, 2.259, 2.258, 2.257, 2.249.1, 2.256, 2.255, 2.254, 2.253, 2.235.5, 2.235.4, 2.252, 2.251, 2.250, 2.235.3, 2.249, 2.248, 2.235.2, 2.246, 2.247, 2.245, 2.244, 2.243, 2.242, 2.241, 2.235.1, 2.240, 2.239, 2.222.4, 2.237, 2.238, 2.236, 2.235, 2.234, 2.222.3, 2.233, 2.232, 2.231, 2.230, 2.229, 2.204.6, 2.222.1, 2.228, 2.227, 2.226, 2.225, 2.224, 2.204.5, 2.204.4, 2.223, 2.204.3, 2.222, 2.221, 2.220, 2.204.2, 2.219, 2.218, 2.217, 2.216, 2.215, 2.214, 2.213, 2.212, 2.211, 2.210, 2.204.1, 2.209, 2.208, 2.207, 2.206, 2.190.3, 2.205, 2.204, 2.203, 2.190.2, 2.202, 2.201, 2.200, 2.199, 2.198, 2.176.4, 2.190.1, 2.197, 2.196, 2.195, 2.194, 2.193, 2.176.3, 2.190, 2.191, 2.192, 2.189, 2.187, 2.186, 2.185, 2.184, 2.183, 2.182, 2.181, 2.180, 2.179, 2.178, 2.177, 2.176.2, 2.176.1, 2.176, 2.175, 2.174, 2.173, 2.172, 2.171, 2.170, 2.169, 2.168, 2.167, 2.166, 2.165, 2.164.3, 2.164.2, 2.164.1, 2.164, 2.163, 2.162, 2.161, 2.159, 2.150.3, 2.150.2, 2.138.3, 2.138.2, 2.138.1, 2.107.3, 2.107.2, 2.107.1, 2.92, 2.91, 2.90, 2.89.4, 2.89.3, 2.89.2, 2.89.1, 2.89, 2.88, 2.87, 2.86, 2.85, 2.84, 2.83, 2.82, 2.81, 2.80, 2.79, 2.78, 2.77, 2.76, 2.75, 2.74, 2.73.3, 2.73.2, 2.73.1, 2.73, 2.72, 2.71, 2.70, 2.69, 2.68, 2.67, 2.66, 2.65, 2.64, 2.63, 2.62, 2.61, 2.60.3, 2.60.2, 2.60.1, 2.60, 2.59, 2.58, 2.57, 2.46.3, 2.46.2, 2.46.1, 2.40, 2.32.3, 2.32.2, 2.32.1, 2.30, 2.29, 2.28, 2.19.4, 2.19.1, 2.16, 2.15, 2.14, 2.13, 2.12, 2.11, 2.10, 2.7.4, 2.7.3, 2.7.2, 2.7.1, 2.5, 2.0, 2.158, 2.157, 2.156, 2.155, 2.150.1, 2.138.4, 2.154, 2.153, 2.152, 2.151, 2.149, 2.148, 2.147, 2.146, 2.145, 2.144, 2.143, 2.142, 2.141, 2.139, 2.121.3, 2.138, 2.137, 2.136, 2.135, 2.121.2, 2.121.1, 2.134, 2.133, 2.132, 2.131, 2.129, 2.128, 2.127, 2.126, 2.125, 2.124, 2.123, 2.122, 2.121, 2.119, 2.118, 2.117, 2.116, 2.115, 2.114, 2.113, 2.112, 2.111, 2.109, 2.108, 2.107, 2.93, 2.94, 2.95, 2.96, 2.97, 2.98, 2.99, 2.105, 2.104, 2.103, 2.102, 2.101, 2.106, 2.56, 2.55, 2.54, 2.53, 2.52, 2.51, 2.49, 2.48, 2.47, 2.46, 2.45, 2.44, 2.43, 2.42, 2.41, 2.39, 2.38, 2.37, 2.36, 2.35, 2.34, 2.33, 2.19.3, 2.19.2, 2.32, 2.31, 240
Jenkins LTS версии 2.263.1, 2.249.3, 2.249.2, 2.249.1, 2.235.5, 2.235.4, 2.235.3, 2.235.2, 2.235.1, 2.222.4, 2.222.3, 2.222.2, 2.222.1, 2.204.6, 2.204.5, 2.204.4, 2.204.3, 2.204.2, 2.204.1, 2.190.3, 2.190.2, 2.190.1, 2.176.4, 2.176.3, 2.19.4, 2.19.3, 2.19.2, 2.19.1, 2.7.4, 2.7.3, 2.7.2, 2.7.1, 2.176.2, 2.176.1, 2.164.3, 2.164.2, 2.164.1, 2.150.3, 2.150.2, 2.150.1, 2.138.4, 2.138.3, 2.138.2, 2.138.1, 2.121.3, 2.121.2, 2.121.1, 2.107.3, 2.107.2, 2.107.1, 2.89.4, 2.89.3, 2.89.2, 2.89.1, 2.73.3, 2.73.2, 2.73.1, 2.60.3, 2.60.2, 2.60.1, 2.46.3, 2.46.2, 2.46.1, 2.32.3, 2.32.2, 2.32.1
Описание:

Множественные уязвимости в Jenkins and Jenkins LTS
URL производителя: https://jenkins.io/
Решение: Установите исправление с сайта производителя.
Ссылки: https://www.cybersecurity-help.cz/vdb/SB2021011418