https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T08:22:01.691752+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-jenkins-2021-21671 BIT-jenkins-2021-21671 2026-10-10T08:22:01.787162+00:00

Affected: Bitnami: jenkins

Jenkins LTS 2.289.1 and earlier does not invalidate the previous session on login.

 https://cve.radiocsirt.org/vuln/cnvd-2021-46872 cnvd-2021-46872 2026-10-10T08:22:01.787230+00:00 cnvd-2021-46872 https://cve.radiocsirt.org/vuln/euvd-2026-22348 EUVD-2026-22348 2026-10-10T08:22:01.787250+00:00 EUVD-2026-22348 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21671 fkie_cve-2021-21671 2026-10-10T08:22:01.787261+00:00

Jenkins 2.299 and earlier, LTS 2.289.1 and earlier does not invalidate the previous session on login.

 https://cve.radiocsirt.org/vuln/ghsa-4wr9-2xc6-jmg5 GHSA-4wr9-2xc6-jmg5 — Session fixation vulnerability in Jenkins 2026-10-10T08:22:01.787281+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins 2.299 and earlier, LTS 2.289.1 and earlier does not invalidate the previous session on login. This allows attackers to use social engineering techniques to gain administrator access to Jenkins.

This vulnerability was introduced in Jenkins 2.266 and LTS 2.277.1.

Jenkins 2.300, LTS 2.289.2 invalidates the previous session on login.

In case of problems, administrators can choose a different implementation by setting the [Java system property `hudson.security.SecurityRealm.sessionFixationProtectionMode`](https://www.jenkins.io/doc/book/managing/system-properties/#hudson-security-securityrealm-sessionfixationprotectionmode) to `2`, or disable the fix entirely by setting that system property to `0`.

 https://cve.radiocsirt.org/vuln/gsd-2021-21671 gsd-2021-21671 2026-10-10T08:22:01.787309+00:00 gsd-2021-21671 https://cve.radiocsirt.org/vuln/rhba-2021:3033 RHBA-2021:3033 — Red Hat Bug Fix Advisory: OpenShift Container Platform 4.7.24 packages update 2026-10-10T08:22:01.787319+00:00

jenkins: improper permission checks allow canceling queue items and aborting builds jenkins: session fixation vulnerability