Skip to content
Sign in
Not rated

CVE-2021-21650 Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP…

Description

Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP endpoints and API models, allowing attackers with Item/Read permission to obtain information about artifacts uploaded to S3, if the optional Run/Artifacts permission is enabled.

Affected products and versions

Product Affected versions Fixed in
Jenkins S3 publisher Plugin 0.11 earliest → 0.11.6 0.11.5.1

Other CVEs of Jenkins S3 publisher Plugin

The 3 CVEs of Jenkins S3 publisher Plugin →
CVE-2021-21651 Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform a permission check in an HTTP endpoint, allowing… Not rated CVE-2020-2114 Jenkins S3 publisher Plugin 0.11.4 and earlier transmits configured credentials in plain text as part of the global… Not rated
Track this CVE