{"id":"CVE-2021-21621","details":"Jenkins Support Core Plugin 2.72 and earlier provides the serialized user authentication as part of the \"About user (basic authentication details only)\" information, which can include the session ID of the user creating the support bundle in some configurations.","aliases":["GHSA-92pg-8g57-hqpx"],"modified":"2026-07-09T00:22:29.771500Z","published":"2021-02-24T16:15:15.133Z","references":[{"type":"ADVISORY","url":"https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2150"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jenkinsci/support-core-plugin","events":[{"introduced":"0"},{"last_affected":"a415c4beb1eba7b69c4c98852e8be526b480c787"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:jenkins:support_core:*:*:*:*:*:jenkins:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"2.72"}]}}],"versions":["support-core-2.72","support-core-2.71","support-core-2.70","support-core-2.69","support-core-2.68","support-core-2.67","support-core-2.66","support-core-2.65","support-core-2.64","support-core-2.63","support-core-2.63-alpha","support-core-2.62","support-core-2.61","support-core-2.60","support-core-2.59","support-core-2.58","support-core-2.57","support-core-2.56","support-core-2.55","support-core-2.54","support-core-2.53","support-core-2.52","support-core-2.51","support-core-2.50","support-core-2.49","support-core-2.48","support-core-2.47","support-core-2.46","support-core-2.45.1","support-core-2.45","support-core-2.44","support-core-2.43","support-core-2.42","support-core-2.41","support-core-2.40","support-core-2.39","support-core-2.38","support-core-2.37","support-core-2.36","support-core-2.35","support-core-2.34","support-core-2.33","support-core-2.32","support-core-2.31","support-core-2.30","support-core-2.29","support-core-2.28","support-core-2.27","support-core-2.25","support-core-2.24","support-core-2.23","support-core-2.22","support-core-2.21","support-core-2.20","support-core-2.19","support-core-2.18","support-core-2.17","support-core-2.16","support-core-2.15","support-core-2.14","support-core-2.13","support-core-2.12","support-core-2.11","support-core-2.10","support-core-2.9","support-core-2.8","support-core-2.7","support-core-2.6","support-core-2.5","support-core-2.4","support-core-2.3","support-core-2.2","support-core-2.1","support-core-2.0","support-core-1.8","support-core-1.7","support-core-1.6","support-core-1.5","support-core-1.4","support-core-1.3","support-core-1.2","support-core-1.1","support-core-1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-21621.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}]}