CVE-2021-21621

CVE-2021-21621 affects Jenkins Support Core Plugin versions 2.72 and earlier, where it inadvertently exposes serialized user authentication data, including session IDs, within support bundles under specific configurations. This vulnerability has a medium severity CVSS score of 5.3, indicating a low-complexity attack that can be executed remotely without authentication, potentially leading to information disclosure. While the vulnerability is publicly known, there is currently no evidence of active exploitation, nor are there readily available exploit tools or significant community discussion surrounding it.