UpHeron
All vulnerabilities

Servers and applications

CVE-2021-21671

Jenkins 2.299 and earlier, LTS 2.289.1 and earlier does not invalidate the previous session on login.

Severity
High 7.5
Published
30 Jun 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.289.2, 2.300
Sources
NVD

Affected software

SoftwareAffected versions
JenkinsServers and applications · cpe:a:jenkins:jenkins
  • From 2.266 before 2.300
  • From 2.277.1 before 2.289.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-21671
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-21671