CVE-2021-21697: jenkins: Agent-to-controller access control allows reading/writing most content of build directories

Severity: Critical

CVSS Score: 9.1

Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenkins with very few restrictions.