Skip to content
Sign in
Not rated

CVE-2021-21651 Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform a permission check in an HTTP endpoint, allowing…

Description

Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to obtain the list of configured profiles.

Affected products and versions

Product Affected versions Fixed in
Jenkins S3 publisher Plugin 0.11 earliest → 0.11.6 0.11.5.1

Other CVEs of Jenkins S3 publisher Plugin

The 3 CVEs of Jenkins S3 publisher Plugin →
CVE-2021-21650 Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP… Not rated CVE-2020-2114 Jenkins S3 publisher Plugin 0.11.4 and earlier transmits configured credentials in plain text as part of the global… Not rated
Track this CVE