Every CVE Search/ Get API key

CVE-2021-21639

Lack of type validation in agent related REST API in Jenkins

4.3 MediumFix available

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the config.xml REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one of a different type.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

2.73%Up 2.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 4.3

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the config.xml REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one of a different type.

Record
CVE-2021-21639
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the config.xml REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one of a different type.

Record
CVE-2021-21639
Updated
2026-11-02
EUVDEUVD-2022-4831 No score

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the config.xml REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one of a different type.

Record
EUVD-2022-4831
Updated
2026-11-03
GitHub AdvisoriesGHSA-pvwx-3jx5-24r2 4.3

Lack of type validation in agent related REST API in Jenkins

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the config.xml REST API endpoint of a node.

This allows attackers with Computer/Configure permission to replace a node with one of a different type.

Jenkins 2.287, LTS 2.277.2 validates the type of object created and rejects objects of unexpected types.

Record
GHSA-pvwx-3jx5-24r2
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-20
Updated
2026-11-02
OSVALPINE-CVE-2021-21639 4.3

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the config.xml REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one of a different type.

Record
ALPINE-CVE-2021-21639
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-03
OSV 4.3

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the config.xml REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one of a different type.

Record
CVE-2021-21639
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
Show 4 moreShow less
OSVGHSA-pvwx-3jx5-24r2 4.3

Lack of type validation in agent related REST API in Jenkins

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the config.xml REST API endpoint of a node.

This allows attackers with Computer/Configure permission to replace a node with one of a different type.

Jenkins 2.287, LTS 2.277.2 validates the type of object created and rejects objects of unexpected types.

Record
GHSA-pvwx-3jx5-24r2
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-20
Updated
2026-11-02
OSVRHSA-2021:1551 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.7.11 security and bug fix update

Record
RHSA-2021:1551
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2021:2437 8.6

Red Hat Security Advisory: OpenShift Container Platform 4.8.2 packages and security update

Record
RHSA-2021:2437
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVBIT-jenkins-2021-21639 No score

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the config.xml REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one of a different type.

Record
BIT-jenkins-2021-21639
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
org.jenkins-ci.main:jenkins-core
Maven
 2.278 to 2.286
2.287
org.jenkins-ci.main:jenkins-core
Maven
 before 2.277.2
2.277.2
jenkins
Alpine:v3.13
 before 2.287-r0
2.287-r0
jenkins
Alpine:v3.14
 before 2.287-r0
2.287-r0
jenkins
Alpine:v3.15
 before 2.287-r0
2.287-r0
jenkins
Alpine:v3.16
 before 2.287-r0
2.287-r0
jenkins
Alpine:v3.17
 before 2.287-r0
2.287-r0
jenkins
Alpine:v3.18
 before 2.287-r0
2.287-r0
jenkins
Alpine:v3.19
 before 2.287-r0
2.287-r0
jenkins
Alpine:v3.20
 before 2.287-r0
2.287-r0
Show 198 moreShow less
Affected packages
PackageAffectedFixed
jenkins
Alpine:v3.21
 before 2.287-r0
2.287-r0
jenkins
Alpine:v3.22
 before 2.287-r0
2.287-r0
jenkins
Alpine:v3.23
 before 2.287-r0
2.287-r0
jenkins
Alpine:v3.24
 before 2.287-r0
2.287-r0
jenkins
Bitnami
 before 2.286.1
2.286.1
org.jenkins-ci.main:jenkins-core
Maven
 before 2.277.2, plus listed versions
1.3961.3971.3981.3991.400
Show 45 moreShow less
1.4011.4031.4041.4051.4061.4071.4081.4091.409.11.409.21.409.31.4101.4111.4121.4131.4141.4151.4161.4171.4181.4191.4201.4211.4221.4231.4241.424.11.424.21.424.31.424.41.424.51.424.61.4251.4261.4271.4281.4291.4301.4311.4321.4331.4341.4351.4361.437
2.277.2
org.jenkins-ci.main:jenkins-core
Maven
 2.278 up to 2.287, plus listed versions
2.2792.2802.2812.2822.2832.2842.2852.286
2.287
cri-tools
Red Hat:openshift:4.7::el7
From an advisory covering 6 CVEs
 before 0:1.20.0-2.el7
0:1.20.0-2.el7
cri-tools-debuginfo
Red Hat:openshift:4.7::el7
From an advisory covering 6 CVEs
 before 0:1.20.0-2.el7
0:1.20.0-2.el7
runc
Red Hat:openshift:4.7::el7
From an advisory covering 6 CVEs
 before 0:1.0.0-95.rhaos4.8.gitcd80260.el7
0:1.0.0-95.rhaos4.8.gitcd80260.el7
runc-debuginfo
Red Hat:openshift:4.7::el7
From an advisory covering 6 CVEs
 before 0:1.0.0-95.rhaos4.8.gitcd80260.el7
0:1.0.0-95.rhaos4.8.gitcd80260.el7
cri-tools
Red Hat:openshift:4.7::el8
From an advisory covering 6 CVEs
 before 0:1.20.0-2.el8
0:1.20.0-2.el8
cri-tools-debuginfo
Red Hat:openshift:4.7::el8
From an advisory covering 6 CVEs
 before 0:1.20.0-2.el8
0:1.20.0-2.el8
cri-tools-debugsource
Red Hat:openshift:4.7::el8
From an advisory covering 6 CVEs
 before 0:1.20.0-2.el8
0:1.20.0-2.el8
runc
Red Hat:openshift:4.7::el8
From an advisory covering 6 CVEs
 before 0:1.0.0-95.rhaos4.8.gitcd80260.el8
0:1.0.0-95.rhaos4.8.gitcd80260.el8
runc-debuginfo
Red Hat:openshift:4.7::el8
From an advisory covering 6 CVEs
 before 0:1.0.0-95.rhaos4.8.gitcd80260.el8
0:1.0.0-95.rhaos4.8.gitcd80260.el8
runc-debugsource
Red Hat:openshift:4.7::el8
From an advisory covering 6 CVEs
 before 0:1.0.0-95.rhaos4.8.gitcd80260.el8
0:1.0.0-95.rhaos4.8.gitcd80260.el8
jenkins
Red Hat:openshift:4.7::el8
From an advisory covering 6 CVEs
 before 0:2.277.3.1620393611-1.el8
0:2.277.3.1620393611-1.el8
ignition
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
ignition-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
ignition-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
ignition-validate
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
ignition-validate-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
openshift
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7
0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7
openshift-clients
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7
0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7
openshift-clients-redistributable
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7
0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7
openshift-hyperkube
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7
0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7
openshift
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8
0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8
openshift-clients
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8
0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8
openshift-clients-redistributable
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8
0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8
0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8
cri-o
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.21.2-5.rhaos4.8.gitb27d974.el7
0:1.21.2-5.rhaos4.8.gitb27d974.el7
cri-o-debuginfo
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.21.2-5.rhaos4.8.gitb27d974.el7
0:1.21.2-5.rhaos4.8.gitb27d974.el7
cri-tools
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.21.0-2.el7
0:1.21.0-2.el7
cri-tools-debuginfo
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.21.0-2.el7
0:1.21.0-2.el7
haproxy
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:2.2.13-1.el7
0:2.2.13-1.el7
haproxy-debuginfo
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:2.2.13-1.el7
0:2.2.13-1.el7
openshift-ansible
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7
0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7
openshift-ansible-test
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7
0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7
runc
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.0.0-98.rhaos4.8.gitcd80260.el7
0:1.0.0-98.rhaos4.8.gitcd80260.el7
runc-debuginfo
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.0.0-98.rhaos4.8.gitcd80260.el7
0:1.0.0-98.rhaos4.8.gitcd80260.el7
afterburn
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.0-1.rhaos4.8.el8
0:5.0.0-1.rhaos4.8.el8
afterburn-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.0-1.rhaos4.8.el8
0:5.0.0-1.rhaos4.8.el8
atomic-openshift-service-idler
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8
0:4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8
butane
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.12.1-1.rhaos4.8.el8
0:0.12.1-1.rhaos4.8.el8
butane-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.12.1-1.rhaos4.8.el8
0:0.12.1-1.rhaos4.8.el8
console-login-helper-messages
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.20.3-1.rhaos4.8.el8
0:0.20.3-1.rhaos4.8.el8
console-login-helper-messages-issuegen
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.20.3-1.rhaos4.8.el8
0:0.20.3-1.rhaos4.8.el8
console-login-helper-messages-profile
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.20.3-1.rhaos4.8.el8
0:0.20.3-1.rhaos4.8.el8
coreos-installer
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
coreos-installer-bootinfra
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
coreos-installer-bootinfra-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
coreos-installer-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
coreos-installer-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
cri-o
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.2-5.rhaos4.8.gitb27d974.el8
0:1.21.2-5.rhaos4.8.gitb27d974.el8
cri-o-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.2-5.rhaos4.8.gitb27d974.el8
0:1.21.2-5.rhaos4.8.gitb27d974.el8
cri-o-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.2-5.rhaos4.8.gitb27d974.el8
0:1.21.2-5.rhaos4.8.gitb27d974.el8
cri-tools
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.0-2.el8
0:1.21.0-2.el8
cri-tools-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.0-2.el8
0:1.21.0-2.el8
cri-tools-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.0-2.el8
0:1.21.0-2.el8
haproxy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.13-1.el8
0:2.2.13-1.el8
haproxy-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.13-1.el8
0:2.2.13-1.el8
ironic-images
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2021.1-20210614.1.el8
0:2021.1-20210614.1.el8
ironic-images-all
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2021.1-20210614.1.el8
0:2021.1-20210614.1.el8
ironic-images-ipa-ppc64le
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2021.1-20210614.1.el8
0:2021.1-20210614.1.el8
ironic-images-ipa-x86_64
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2021.1-20210614.1.el8
0:2021.1-20210614.1.el8
jenkins
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.289.1.1624020353-1.el8
0:2.289.1.1624020353-1.el8
jenkins-2-plugins
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.1624022417-1.el8
0:4.8.1624022417-1.el8
kata-containers
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.1.0-4.el8
0:2.1.0-4.el8
openshift-kuryr
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
openshift-kuryr-cni
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
openshift-kuryr-common
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
openshift-kuryr-controller
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
openstack-ironic
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
openstack-ironic-api
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
openstack-ironic-common
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
openstack-ironic-conductor
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
openstack-ironic-inspector
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
openstack-ironic-inspector-api
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
openstack-ironic-inspector-conductor
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
openstack-ironic-inspector-dnsmasq
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
openstack-ironic-python-agent
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:7.0.2-0.20210611153100.bfa97cb.el8
0:7.0.2-0.20210611153100.bfa97cb.el8
openvswitch2.15
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
openvswitch2.15-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
openvswitch2.15-devel
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
openvswitch2.15-ipsec
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
ostree
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-devel
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-grub2
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-libs
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-libs-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ovn2.13
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-central
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-central-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-host
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-host-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-vtep
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-vtep-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
podman
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-catatonit-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-docker
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-plugins-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-remote
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-remote-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
python-debtcollector
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.0-0.20210324220630.649189d.el8
0:2.2.0-0.20210324220630.649189d.el8
python-eventlet
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.25.2-4.el8
0:0.25.2-4.el8
python-hardware
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.27.0-0.20210406121246.756fedb.el8
0:0.27.0-0.20210406121246.756fedb.el8
python-ironic-lib
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.6.2-0.20210608101214.ca2e4ba.el8
0:4.6.2-0.20210608101214.ca2e4ba.el8
python-ironic-prometheus-exporter
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.1-0.20210325143713.70e39c8.el8
0:2.2.1-0.20210325143713.70e39c8.el8
python-jsonschema
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.2.0-5.el8ost
0:3.2.0-5.el8ost
python-keystoneauth1
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.3.0-0.20210325001456.6a66271.el8
0:4.3.0-0.20210325001456.6a66271.el8
python-kubernetes
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:12.0.1-1.el8
0:12.0.1-1.el8
python-openshift
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:0.12.1-1.el8
1:0.12.1-1.el8
python-openstacksdk
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.53.0-0.20210325011601.4629245.el8
0:0.53.0-0.20210325011601.4629245.el8
python-oslo-concurrency
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210325004915.7dcf9e9.el8
0:4.4.0-0.20210325004915.7dcf9e9.el8
python-oslo-concurrency-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210325004915.7dcf9e9.el8
0:4.4.0-0.20210325004915.7dcf9e9.el8
python-oslo-config
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 2:8.5.0-0.20210325050501.cfa2564.el8
2:8.5.0-0.20210325050501.cfa2564.el8
python-oslo-context
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.2.0-0.20210325043103.0d02866.el8
0:3.2.0-0.20210325043103.0d02866.el8
python-oslo-db
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:8.5.0-0.20210325041241.503db60.el8
0:8.5.0-0.20210325041241.503db60.el8
python-oslo-db-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:8.5.0-0.20210325041241.503db60.el8
0:8.5.0-0.20210325041241.503db60.el8
python-oslo-i18n
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.1-0.20210324221600.73187bd.el8
0:5.0.1-0.20210324221600.73187bd.el8
python-oslo-i18n-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.1-0.20210324221600.73187bd.el8
0:5.0.1-0.20210324221600.73187bd.el8
python-oslo-log
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210409081224.9b29c90.el8
0:4.4.0-0.20210409081224.9b29c90.el8
python-oslo-log-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210409081224.9b29c90.el8
0:4.4.0-0.20210409081224.9b29c90.el8
python-oslo-policy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.0-0.20210325051823.d853485.el8
0:3.7.0-0.20210325051823.d853485.el8
python-oslo-policy-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.0-0.20210325051823.d853485.el8
0:3.7.0-0.20210325051823.d853485.el8
python-oslo-serialization
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.1.0-0.20210325012242.8445e61.el8
0:4.1.0-0.20210325012242.8445e61.el8
python-oslo-service
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.5.0-0.20210325014731.d25e454.el8
0:2.5.0-0.20210325014731.d25e454.el8
python-oslo-upgradecheck
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.3.0-0.20210325003851.9f95a6e.el8
0:1.3.0-0.20210325003851.9f95a6e.el8
python-oslo-utils
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-0.20210325043201.3288539.el8
0:4.8.0-0.20210325043201.3288539.el8
python-oslo-utils-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-0.20210325043201.3288539.el8
0:4.8.0-0.20210325043201.3288539.el8
python-pyrsistent
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.16.0-3.el8ost
0:0.16.0-3.el8ost
python-stevedore
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.3.0-0.20210325001012.7d7154f.el8
0:3.3.0-0.20210325001012.7d7154f.el8
python-sushy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.1-0.20210428165244.bc49878.el8
0:3.7.1-0.20210428165244.bc49878.el8
python-sushy-oem-idrac
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-0.20210326152858.83b7eb0.el8
0:2.0.1-0.20210326152858.83b7eb0.el8
python-tooz
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.8.0-0.20210324235001.54448e9.el8
0:2.8.0-0.20210324235001.54448e9.el8
python3-debtcollector
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.0-0.20210324220630.649189d.el8
0:2.2.0-0.20210324220630.649189d.el8
python3-eventlet
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.25.2-4.el8
0:0.25.2-4.el8
python3-hardware
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.27.0-0.20210406121246.756fedb.el8
0:0.27.0-0.20210406121246.756fedb.el8
python3-hardware-detect
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.27.0-0.20210406121246.756fedb.el8
0:0.27.0-0.20210406121246.756fedb.el8
python3-ironic-inspector-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
python3-ironic-lib
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.6.2-0.20210608101214.ca2e4ba.el8
0:4.6.2-0.20210608101214.ca2e4ba.el8
python3-ironic-prometheus-exporter
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.1-0.20210325143713.70e39c8.el8
0:2.2.1-0.20210325143713.70e39c8.el8
python3-ironic-python-agent
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:7.0.2-0.20210611153100.bfa97cb.el8
0:7.0.2-0.20210611153100.bfa97cb.el8
python3-ironic-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
python3-jsonschema
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.2.0-5.el8ost
0:3.2.0-5.el8ost
python3-keystoneauth1
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.3.0-0.20210325001456.6a66271.el8
0:4.3.0-0.20210325001456.6a66271.el8
python3-kubernetes
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:12.0.1-1.el8
0:12.0.1-1.el8
python3-kubernetes-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:12.0.1-1.el8
0:12.0.1-1.el8
python3-kuryr-kubernetes
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
python3-openshift
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:0.12.1-1.el8
1:0.12.1-1.el8
python3-openstacksdk
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.53.0-0.20210325011601.4629245.el8
0:0.53.0-0.20210325011601.4629245.el8
python3-openstacksdk-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.53.0-0.20210325011601.4629245.el8
0:0.53.0-0.20210325011601.4629245.el8
python3-openvswitch2.15
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
python3-openvswitch2.15-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
python3-oslo-concurrency
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210325004915.7dcf9e9.el8
0:4.4.0-0.20210325004915.7dcf9e9.el8
python3-oslo-concurrency-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210325004915.7dcf9e9.el8
0:4.4.0-0.20210325004915.7dcf9e9.el8
python3-oslo-config
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 2:8.5.0-0.20210325050501.cfa2564.el8
2:8.5.0-0.20210325050501.cfa2564.el8
python3-oslo-context
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.2.0-0.20210325043103.0d02866.el8
0:3.2.0-0.20210325043103.0d02866.el8
python3-oslo-db
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:8.5.0-0.20210325041241.503db60.el8
0:8.5.0-0.20210325041241.503db60.el8
python3-oslo-db-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:8.5.0-0.20210325041241.503db60.el8
0:8.5.0-0.20210325041241.503db60.el8
python3-oslo-i18n
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.1-0.20210324221600.73187bd.el8
0:5.0.1-0.20210324221600.73187bd.el8
python3-oslo-log
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210409081224.9b29c90.el8
0:4.4.0-0.20210409081224.9b29c90.el8
python3-oslo-log-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210409081224.9b29c90.el8
0:4.4.0-0.20210409081224.9b29c90.el8
python3-oslo-policy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.0-0.20210325051823.d853485.el8
0:3.7.0-0.20210325051823.d853485.el8
python3-oslo-serialization
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.1.0-0.20210325012242.8445e61.el8
0:4.1.0-0.20210325012242.8445e61.el8
python3-oslo-serialization-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.1.0-0.20210325012242.8445e61.el8
0:4.1.0-0.20210325012242.8445e61.el8
python3-oslo-service
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.5.0-0.20210325014731.d25e454.el8
0:2.5.0-0.20210325014731.d25e454.el8
python3-oslo-service-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.5.0-0.20210325014731.d25e454.el8
0:2.5.0-0.20210325014731.d25e454.el8
python3-oslo-upgradecheck
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.3.0-0.20210325003851.9f95a6e.el8
0:1.3.0-0.20210325003851.9f95a6e.el8
python3-oslo-utils
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-0.20210325043201.3288539.el8
0:4.8.0-0.20210325043201.3288539.el8
python3-oslo-utils-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-0.20210325043201.3288539.el8
0:4.8.0-0.20210325043201.3288539.el8
python3-pyrsistent
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.16.0-3.el8ost
0:0.16.0-3.el8ost
python3-pyrsistent-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.16.0-3.el8ost
0:0.16.0-3.el8ost
python3-stevedore
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.3.0-0.20210325001012.7d7154f.el8
0:3.3.0-0.20210325001012.7d7154f.el8
python3-sushy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.1-0.20210428165244.bc49878.el8
0:3.7.1-0.20210428165244.bc49878.el8
python3-sushy-oem-idrac
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-0.20210326152858.83b7eb0.el8
0:2.0.1-0.20210326152858.83b7eb0.el8
python3-sushy-oem-idrac-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-0.20210326152858.83b7eb0.el8
0:2.0.1-0.20210326152858.83b7eb0.el8
python3-sushy-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.1-0.20210428165244.bc49878.el8
0:3.7.1-0.20210428165244.bc49878.el8
python3-tooz
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.8.0-0.20210324235001.54448e9.el8
0:2.8.0-0.20210324235001.54448e9.el8
redhat-release-coreos
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:48.84-4.el8
0:48.84-4.el8
rteval-loads
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.4-12.el8
0:1.4-12.el8
rteval-loads-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.4-12.el8
0:1.4-12.el8
runc
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-98.rhaos4.8.gitcd80260.el8
0:1.0.0-98.rhaos4.8.gitcd80260.el8
runc-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-98.rhaos4.8.gitcd80260.el8
0:1.0.0-98.rhaos4.8.gitcd80260.el8
runc-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-98.rhaos4.8.gitcd80260.el8
0:1.0.0-98.rhaos4.8.gitcd80260.el8
rust-afterburn
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.0-1.rhaos4.8.el8
0:5.0.0-1.rhaos4.8.el8
rust-afterburn-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.0-1.rhaos4.8.el8
0:5.0.0-1.rhaos4.8.el8
stress-ng
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.12.06-1.el8
0:0.12.06-1.el8
stress-ng-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.12.06-1.el8
0:0.12.06-1.el8
toolbox
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.0.8-3.rhaos4.8.el8
0:0.0.8-3.rhaos4.8.el8

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-21639 is a medium vulnerability (CVSS 4.3) in Jenkins, published April 7, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.73%, the 86th percentile. Fixed in org.jenkins-ci.main:jenkins-core 2.287.

References

Show 134 moreShow less
This page doesn't list everything

Left out here: 624 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open