PT-2021-14729 · Jenkins · Jenkins Subversion Plugin+1

Daniel Beck · Published 2021-11-04 · Updated 2023-11-22 · CVE-2021-21698

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Subversion Plugin versions 2.15.0 and earlier

Description The issue allows attackers who can control agent processes to read arbitrary files on the Jenkins controller file system. This is because the plugin does not restrict the name of a file when looking up a subversion key file on the controller from an agent.

Recommendations For Jenkins Subversion Plugin versions 2.15.0 and earlier, update to version 2.15.1 or later, which checks for the presence of and prohibits directory separator characters as part of the file name, restricting it to the intended directory.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-21698

GHSA-Q58J-FHJ7-J6FG

RHSA-2021:4799

RHSA-2021:4801

RHSA-2021:4827

RHSA-2021:4829

RHSA-2021:4833

Affected Products

Jenkins

Jenkins Subversion Plugin

References · 8

• https://jenkins.io/security/advisory/2021-11-04/#SECURITY-2506 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-21698 · Security Note
• https://osv.dev/vulnerability/GHSA-q58j-fhj7-j6fg · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-21698 · Vendor Advisory
• https://github.com/jenkinsci/subversion-plugin/commit/7d1525edea6641a2febd3f7deeac55c0a89b0d7e · Note
• https://github.com/jenkinsci/subversion-plugin · Note
• http://openwall.com/lists/oss-security/2021/11/04/3 · Note
• https://t.me/cibsecurity/31834 · Telegram Post