Non notée

CVE-2021-21650 Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP…

Description

Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP endpoints and API models, allowing attackers with Item/Read permission to obtain information about artifacts uploaded to S3, if the optional Run/Artifacts permission is enabled.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins S3 publisher Plugin 0.11	premières → 0.11.6	0.11.5.1

Les 3 CVE de Jenkins S3 publisher Plugin →

CVE-2021-21651 Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform a permission check in an HTTP endpoint, allowing… Non notée CVE-2020-2114 Jenkins S3 publisher Plugin 0.11.4 and earlier transmits configured credentials in plain text as part of the global… Non notée

Vous utilisez Jenkins S3 publisher Plugin ?

Suivre cette CVE Surveiller Jenkins S3 publisher Plugin Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2021-21650

Chronologie

Publiée 11 mai 2021
Dernière modification 3 août 2024

Références

www.jenkins.io www.jenkins.io

Suivre cette CVE

CVE-2021-21650 Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP…

Description

Produits et versions touchés

Autres CVE de Jenkins S3 publisher Plugin