{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "File path filters do not canonicalize paths, allowing operations to follow symbolic links to outside allowed directories",
    "tracking": {
      "current_release_date": "2026-08-11T14:53:35+00:00",
      "generator": {
        "date": "2026-08-11T14:53:35+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.3.0"
        }
      },
      "id": "CVE-2021-21686",
      "initial_release_date": "2021-11-04T14:20:00+00:00",
      "revision_history": [
        {
          "date": "2026-08-11T14:53:35+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.10",
            "product": {
              "name": "OpenShift Container Platform 4.10",
              "product_id": "openshift-4.10::el8",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.10::el8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.6",
            "product": {
              "name": "OpenShift Container Platform 4.6",
              "product_id": "openshift-4.6.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.6",
            "product": {
              "name": "OpenShift Container Platform 4.6",
              "product_id": "openshift-4.6::el8",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.6::el8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.7",
            "product": {
              "name": "OpenShift Container Platform 4.7",
              "product_id": "openshift-4.7.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.7"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.7",
            "product": {
              "name": "OpenShift Container Platform 4.7",
              "product_id": "openshift-4.7::el8",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.7::el8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.8",
            "product": {
              "name": "OpenShift Container Platform 4.8",
              "product_id": "openshift-4.8.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.8",
            "product": {
              "name": "OpenShift Container Platform 4.8",
              "product_id": "openshift-4.8::el8",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.8::el8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.9",
            "product": {
              "name": "OpenShift Container Platform 4.9",
              "product_id": "openshift-4.9.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.9"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 4.9",
            "product": {
              "name": "OpenShift Container Platform 4.9",
              "product_id": "openshift-4.9::el8",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:4.9::el8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 3.11.0",
            "product": {
              "name": "OpenShift Container Platform 3.11.0",
              "product_id": "openshift-enterprise-3.11-default::el7",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:3.11::el7"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 3.11.0",
            "product": {
              "name": "OpenShift Container Platform 3.11.0",
              "product_id": "openshift-enterprise-3.11.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:3.11"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 3.11.0",
            "product": {
              "name": "OpenShift Container Platform 3.11.0",
              "product_id": "openshift-enterprise-3.11::el7",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:3.11::el7"
              }
            }
          },
          {
            "category": "product_version",
            "name": "jenkins",
            "product": {
              "name": "jenkins",
              "product_id": "jenkins",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/jenkins"
              }
            }
          },
          {
            "category": "product_version",
            "name": "jenkins",
            "product": {
              "name": "jenkins",
              "product_id": "jenkins-0:2.303.3.1637595827-1.el8",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/jenkins@2.303.3.1637595827-1.el8?epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "jenkins",
            "product": {
              "name": "jenkins",
              "product_id": "jenkins-0:2.303.3.1637595827-1.el8.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/jenkins@2.303.3.1637595827-1.el8?arch=src&epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "jenkins",
            "product": {
              "name": "jenkins",
              "product_id": "jenkins-0:2.303.3.1637596565-1.el8",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/jenkins@2.303.3.1637596565-1.el8?epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "jenkins",
            "product": {
              "name": "jenkins",
              "product_id": "jenkins-0:2.303.3.1637596565-1.el8.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/jenkins@2.303.3.1637596565-1.el8?arch=src&epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "jenkins",
            "product": {
              "name": "jenkins",
              "product_id": "jenkins-0:2.303.3.1637597018-1.el8",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/jenkins@2.303.3.1637597018-1.el8?epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "jenkins",
            "product": {
              "name": "jenkins",
              "product_id": "jenkins-0:2.303.3.1637597018-1.el8.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/jenkins@2.303.3.1637597018-1.el8?arch=src&epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "jenkins",
            "product": {
              "name": "jenkins",
              "product_id": "jenkins-0:2.303.3.1637597493-1.el8",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/jenkins@2.303.3.1637597493-1.el8?epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "jenkins",
            "product": {
              "name": "jenkins",
              "product_id": "jenkins-0:2.303.3.1637597493-1.el8.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/jenkins@2.303.3.1637597493-1.el8?arch=src&epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "jenkins",
            "product": {
              "name": "jenkins",
              "product_id": "jenkins-0:2.303.3.1637698110-1.el7",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/jenkins@2.303.3.1637698110-1.el7?epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "jenkins",
            "product": {
              "name": "jenkins",
              "product_id": "jenkins-0:2.303.3.1637698110-1.el7.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/jenkins@2.303.3.1637698110-1.el7?arch=src&epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "jenkins",
            "product": {
              "name": "jenkins",
              "product_id": "jenkins-0:2.319.2.1643288987-1.el8",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/jenkins@2.319.2.1643288987-1.el8?epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "jenkins",
            "product": {
              "name": "jenkins",
              "product_id": "jenkins-0:2.319.2.1643288987-1.el8.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/jenkins@2.319.2.1643288987-1.el8?arch=src&epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "jenkins",
            "product": {
              "name": "jenkins",
              "product_id": "jenkins.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/jenkins?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins as a component of OpenShift Container Platform 4.9",
          "product_id": "openshift-4.9.z:jenkins"
        },
        "product_reference": "jenkins",
        "relates_to_product_reference": "openshift-4.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins as a component of OpenShift Container Platform 4.8",
          "product_id": "openshift-4.8.z:jenkins"
        },
        "product_reference": "jenkins",
        "relates_to_product_reference": "openshift-4.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins as a component of OpenShift Container Platform 4.6",
          "product_id": "openshift-4.6.z:jenkins"
        },
        "product_reference": "jenkins",
        "relates_to_product_reference": "openshift-4.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins as a component of OpenShift Container Platform 3.11.0",
          "product_id": "openshift-enterprise-3.11.z:jenkins"
        },
        "product_reference": "jenkins",
        "relates_to_product_reference": "openshift-enterprise-3.11.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins as a component of OpenShift Container Platform 4.7",
          "product_id": "openshift-4.7.z:jenkins"
        },
        "product_reference": "jenkins",
        "relates_to_product_reference": "openshift-4.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins-0:2.303.3.1637595827-1.el8 as a component of OpenShift Container Platform 4.9",
          "product_id": "openshift-4.9::el8:jenkins-0:2.303.3.1637595827-1.el8"
        },
        "product_reference": "jenkins-0:2.303.3.1637595827-1.el8",
        "relates_to_product_reference": "openshift-4.9::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins-0:2.303.3.1637595827-1.el8.src as a component of OpenShift Container Platform 4.9",
          "product_id": "openshift-4.9::el8:jenkins-0:2.303.3.1637595827-1.el8.src"
        },
        "product_reference": "jenkins-0:2.303.3.1637595827-1.el8.src",
        "relates_to_product_reference": "openshift-4.9::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins-0:2.303.3.1637596565-1.el8 as a component of OpenShift Container Platform 4.8",
          "product_id": "openshift-4.8::el8:jenkins-0:2.303.3.1637596565-1.el8"
        },
        "product_reference": "jenkins-0:2.303.3.1637596565-1.el8",
        "relates_to_product_reference": "openshift-4.8::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins-0:2.303.3.1637596565-1.el8.src as a component of OpenShift Container Platform 4.8",
          "product_id": "openshift-4.8::el8:jenkins-0:2.303.3.1637596565-1.el8.src"
        },
        "product_reference": "jenkins-0:2.303.3.1637596565-1.el8.src",
        "relates_to_product_reference": "openshift-4.8::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins-0:2.303.3.1637597018-1.el8 as a component of OpenShift Container Platform 4.7",
          "product_id": "openshift-4.7::el8:jenkins-0:2.303.3.1637597018-1.el8"
        },
        "product_reference": "jenkins-0:2.303.3.1637597018-1.el8",
        "relates_to_product_reference": "openshift-4.7::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins-0:2.303.3.1637597018-1.el8.src as a component of OpenShift Container Platform 4.7",
          "product_id": "openshift-4.7::el8:jenkins-0:2.303.3.1637597018-1.el8.src"
        },
        "product_reference": "jenkins-0:2.303.3.1637597018-1.el8.src",
        "relates_to_product_reference": "openshift-4.7::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins-0:2.303.3.1637597493-1.el8 as a component of OpenShift Container Platform 4.6",
          "product_id": "openshift-4.6::el8:jenkins-0:2.303.3.1637597493-1.el8"
        },
        "product_reference": "jenkins-0:2.303.3.1637597493-1.el8",
        "relates_to_product_reference": "openshift-4.6::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins-0:2.303.3.1637597493-1.el8.src as a component of OpenShift Container Platform 4.6",
          "product_id": "openshift-4.6::el8:jenkins-0:2.303.3.1637597493-1.el8.src"
        },
        "product_reference": "jenkins-0:2.303.3.1637597493-1.el8.src",
        "relates_to_product_reference": "openshift-4.6::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins-0:2.303.3.1637698110-1.el7 as a component of OpenShift Container Platform 3.11.0",
          "product_id": "openshift-enterprise-3.11-default::el7:jenkins-0:2.303.3.1637698110-1.el7"
        },
        "product_reference": "jenkins-0:2.303.3.1637698110-1.el7",
        "relates_to_product_reference": "openshift-enterprise-3.11-default::el7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins-0:2.303.3.1637698110-1.el7 as a component of OpenShift Container Platform 3.11.0",
          "product_id": "openshift-enterprise-3.11::el7:jenkins-0:2.303.3.1637698110-1.el7"
        },
        "product_reference": "jenkins-0:2.303.3.1637698110-1.el7",
        "relates_to_product_reference": "openshift-enterprise-3.11::el7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins-0:2.303.3.1637698110-1.el7.src as a component of OpenShift Container Platform 3.11.0",
          "product_id": "openshift-enterprise-3.11::el7:jenkins-0:2.303.3.1637698110-1.el7.src"
        },
        "product_reference": "jenkins-0:2.303.3.1637698110-1.el7.src",
        "relates_to_product_reference": "openshift-enterprise-3.11::el7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins-0:2.303.3.1637698110-1.el7.src as a component of OpenShift Container Platform 3.11.0",
          "product_id": "openshift-enterprise-3.11-default::el7:jenkins-0:2.303.3.1637698110-1.el7.src"
        },
        "product_reference": "jenkins-0:2.303.3.1637698110-1.el7.src",
        "relates_to_product_reference": "openshift-enterprise-3.11-default::el7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins-0:2.319.2.1643288987-1.el8 as a component of OpenShift Container Platform 4.10",
          "product_id": "openshift-4.10::el8:jenkins-0:2.319.2.1643288987-1.el8"
        },
        "product_reference": "jenkins-0:2.319.2.1643288987-1.el8",
        "relates_to_product_reference": "openshift-4.10::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins-0:2.319.2.1643288987-1.el8.src as a component of OpenShift Container Platform 4.10",
          "product_id": "openshift-4.10::el8:jenkins-0:2.319.2.1643288987-1.el8.src"
        },
        "product_reference": "jenkins-0:2.319.2.1643288987-1.el8.src",
        "relates_to_product_reference": "openshift-4.10::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins.src as a component of OpenShift Container Platform 4.8",
          "product_id": "openshift-4.8.z:jenkins.src"
        },
        "product_reference": "jenkins.src",
        "relates_to_product_reference": "openshift-4.8.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins.src as a component of OpenShift Container Platform 4.6",
          "product_id": "openshift-4.6.z:jenkins.src"
        },
        "product_reference": "jenkins.src",
        "relates_to_product_reference": "openshift-4.6.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins.src as a component of OpenShift Container Platform 3.11.0",
          "product_id": "openshift-enterprise-3.11.z:jenkins.src"
        },
        "product_reference": "jenkins.src",
        "relates_to_product_reference": "openshift-enterprise-3.11.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins.src as a component of OpenShift Container Platform 4.7",
          "product_id": "openshift-4.7.z:jenkins.src"
        },
        "product_reference": "jenkins.src",
        "relates_to_product_reference": "openshift-4.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins.src as a component of OpenShift Container Platform 4.9",
          "product_id": "openshift-4.9.z:jenkins.src"
        },
        "product_reference": "jenkins.src",
        "relates_to_product_reference": "openshift-4.9.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-21686",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access ('Link Following')"
      },
      "discovery_date": "2021-11-04T00:00:00+00:00",
      "notes": [
        {
          "category": "description",
          "text": "A link following vulnerability was found in Jenkins. The file path filters do not canonicalize paths allowing operations to follow symbolic links to directories they are not supposed to have access to. This may allow an attacker to read and write arbitrary files on the Jenkins controller file system.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "openshift-4.10::el8:jenkins-0:2.319.2.1643288987-1.el8",
          "openshift-4.10::el8:jenkins-0:2.319.2.1643288987-1.el8.src",
          "openshift-4.6::el8:jenkins-0:2.303.3.1637597493-1.el8",
          "openshift-4.6::el8:jenkins-0:2.303.3.1637597493-1.el8.src",
          "openshift-4.7::el8:jenkins-0:2.303.3.1637597018-1.el8",
          "openshift-4.7::el8:jenkins-0:2.303.3.1637597018-1.el8.src",
          "openshift-4.8::el8:jenkins-0:2.303.3.1637596565-1.el8",
          "openshift-4.8::el8:jenkins-0:2.303.3.1637596565-1.el8.src",
          "openshift-4.9::el8:jenkins-0:2.303.3.1637595827-1.el8",
          "openshift-4.9::el8:jenkins-0:2.303.3.1637595827-1.el8.src",
          "openshift-enterprise-3.11-default::el7:jenkins-0:2.303.3.1637698110-1.el7",
          "openshift-enterprise-3.11-default::el7:jenkins-0:2.303.3.1637698110-1.el7.src",
          "openshift-enterprise-3.11::el7:jenkins-0:2.303.3.1637698110-1.el7",
          "openshift-enterprise-3.11::el7:jenkins-0:2.303.3.1637698110-1.el7.src"
        ],
        "known_affected": [
          "openshift-4.6.z:jenkins",
          "openshift-4.6.z:jenkins.src",
          "openshift-4.7.z:jenkins",
          "openshift-4.7.z:jenkins.src",
          "openshift-4.8.z:jenkins",
          "openshift-4.8.z:jenkins.src",
          "openshift-4.9.z:jenkins",
          "openshift-4.9.z:jenkins.src",
          "openshift-enterprise-3.11.z:jenkins",
          "openshift-enterprise-3.11.z:jenkins.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-21686"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21686"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-21686"
        }
      ],
      "remediations": [
        {
          "category": "none_available",
          "details": "Affected",
          "product_ids": [
            "openshift-4.6.z:jenkins",
            "openshift-4.6.z:jenkins.src",
            "openshift-4.7.z:jenkins",
            "openshift-4.7.z:jenkins.src",
            "openshift-4.8.z:jenkins",
            "openshift-4.8.z:jenkins.src",
            "openshift-4.9.z:jenkins",
            "openshift-4.9.z:jenkins.src",
            "openshift-enterprise-3.11.z:jenkins",
            "openshift-enterprise-3.11.z:jenkins.src"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2022-03-10T14:59:25+00:00",
          "details": "Apply advisory RHSA-2022:0055 as per vendors instructions.",
          "product_ids": [
            "openshift-4.10::el8:jenkins-0:2.319.2.1643288987-1.el8",
            "openshift-4.10::el8:jenkins-0:2.319.2.1643288987-1.el8.src"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2022:0055"
        },
        {
          "category": "vendor_fix",
          "date": "2021-12-02T18:37:55+00:00",
          "details": "Apply advisory RHSA-2021:4799 as per vendors instructions.",
          "product_ids": [
            "openshift-4.6::el8:jenkins-0:2.303.3.1637597493-1.el8",
            "openshift-4.6::el8:jenkins-0:2.303.3.1637597493-1.el8.src"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2021:4799"
        },
        {
          "category": "vendor_fix",
          "date": "2021-12-01T12:28:59+00:00",
          "details": "Apply advisory RHSA-2021:4801 as per vendors instructions.",
          "product_ids": [
            "openshift-4.7::el8:jenkins-0:2.303.3.1637597018-1.el8",
            "openshift-4.7::el8:jenkins-0:2.303.3.1637597018-1.el8.src"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2021:4801"
        },
        {
          "category": "vendor_fix",
          "date": "2021-12-02T22:04:06+00:00",
          "details": "Apply advisory RHSA-2021:4827 as per vendors instructions.",
          "product_ids": [
            "openshift-enterprise-3.11-default::el7:jenkins-0:2.303.3.1637698110-1.el7",
            "openshift-enterprise-3.11-default::el7:jenkins-0:2.303.3.1637698110-1.el7.src",
            "openshift-enterprise-3.11::el7:jenkins-0:2.303.3.1637698110-1.el7",
            "openshift-enterprise-3.11::el7:jenkins-0:2.303.3.1637698110-1.el7.src"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2021:4827"
        },
        {
          "category": "vendor_fix",
          "date": "2021-11-30T09:11:27+00:00",
          "details": "Apply advisory RHSA-2021:4829 as per vendors instructions.",
          "product_ids": [
            "openshift-4.8::el8:jenkins-0:2.303.3.1637596565-1.el8",
            "openshift-4.8::el8:jenkins-0:2.303.3.1637596565-1.el8.src"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2021:4829"
        },
        {
          "category": "vendor_fix",
          "date": "2021-11-29T10:40:21+00:00",
          "details": "Apply advisory RHSA-2021:4833 as per vendors instructions.",
          "product_ids": [
            "openshift-4.9::el8:jenkins-0:2.303.3.1637595827-1.el8",
            "openshift-4.9::el8:jenkins-0:2.303.3.1637595827-1.el8.src"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2021:4833"
        },
        {
          "category": "workaround",
          "details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
          "product_ids": [
            "openshift-4.6.z:jenkins",
            "openshift-4.6.z:jenkins.src",
            "openshift-4.7.z:jenkins",
            "openshift-4.7.z:jenkins.src",
            "openshift-4.8.z:jenkins",
            "openshift-4.8.z:jenkins.src",
            "openshift-4.9.z:jenkins",
            "openshift-4.9.z:jenkins.src",
            "openshift-enterprise-3.11.z:jenkins",
            "openshift-enterprise-3.11.z:jenkins.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore": 9.0,
            "baseSeverity": "CRITICAL"
          },
          "products": [
            "openshift-4.10::el8:jenkins-0:2.319.2.1643288987-1.el8",
            "openshift-4.10::el8:jenkins-0:2.319.2.1643288987-1.el8.src",
            "openshift-4.6.z:jenkins",
            "openshift-4.6.z:jenkins.src",
            "openshift-4.6::el8:jenkins-0:2.303.3.1637597493-1.el8",
            "openshift-4.6::el8:jenkins-0:2.303.3.1637597493-1.el8.src",
            "openshift-4.7.z:jenkins",
            "openshift-4.7.z:jenkins.src",
            "openshift-4.7::el8:jenkins-0:2.303.3.1637597018-1.el8",
            "openshift-4.7::el8:jenkins-0:2.303.3.1637597018-1.el8.src",
            "openshift-4.8.z:jenkins",
            "openshift-4.8.z:jenkins.src",
            "openshift-4.8::el8:jenkins-0:2.303.3.1637596565-1.el8",
            "openshift-4.8::el8:jenkins-0:2.303.3.1637596565-1.el8.src",
            "openshift-4.9.z:jenkins",
            "openshift-4.9.z:jenkins.src",
            "openshift-4.9::el8:jenkins-0:2.303.3.1637595827-1.el8",
            "openshift-4.9::el8:jenkins-0:2.303.3.1637595827-1.el8.src",
            "openshift-enterprise-3.11-default::el7:jenkins-0:2.303.3.1637698110-1.el7",
            "openshift-enterprise-3.11-default::el7:jenkins-0:2.303.3.1637698110-1.el7.src",
            "openshift-enterprise-3.11.z:jenkins",
            "openshift-enterprise-3.11.z:jenkins.src",
            "openshift-enterprise-3.11::el7:jenkins-0:2.303.3.1637698110-1.el7",
            "openshift-enterprise-3.11::el7:jenkins-0:2.303.3.1637698110-1.el7.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important",
          "product_ids": [
            "openshift-4.10::el8:jenkins-0:2.319.2.1643288987-1.el8",
            "openshift-4.10::el8:jenkins-0:2.319.2.1643288987-1.el8.src",
            "openshift-4.6.z:jenkins",
            "openshift-4.6.z:jenkins.src",
            "openshift-4.6::el8:jenkins-0:2.303.3.1637597493-1.el8",
            "openshift-4.6::el8:jenkins-0:2.303.3.1637597493-1.el8.src",
            "openshift-4.7.z:jenkins",
            "openshift-4.7.z:jenkins.src",
            "openshift-4.7::el8:jenkins-0:2.303.3.1637597018-1.el8",
            "openshift-4.7::el8:jenkins-0:2.303.3.1637597018-1.el8.src",
            "openshift-4.8.z:jenkins",
            "openshift-4.8.z:jenkins.src",
            "openshift-4.8::el8:jenkins-0:2.303.3.1637596565-1.el8",
            "openshift-4.8::el8:jenkins-0:2.303.3.1637596565-1.el8.src",
            "openshift-4.9.z:jenkins",
            "openshift-4.9.z:jenkins.src",
            "openshift-4.9::el8:jenkins-0:2.303.3.1637595827-1.el8",
            "openshift-4.9::el8:jenkins-0:2.303.3.1637595827-1.el8.src",
            "openshift-enterprise-3.11-default::el7:jenkins-0:2.303.3.1637698110-1.el7",
            "openshift-enterprise-3.11-default::el7:jenkins-0:2.303.3.1637698110-1.el7.src",
            "openshift-enterprise-3.11.z:jenkins",
            "openshift-enterprise-3.11.z:jenkins.src",
            "openshift-enterprise-3.11::el7:jenkins-0:2.303.3.1637698110-1.el7",
            "openshift-enterprise-3.11::el7:jenkins-0:2.303.3.1637698110-1.el7.src"
          ]
        }
      ],
      "title": "File path filters do not canonicalize paths, allowing operations to follow symbolic links to outside allowed directories"
    }
  ]
}