Lucene search
GoogleOSV:GHSA-2959-FJ73-HM8PHistoryMay 24, 2022 - 5:48 p.m.
Missing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs
2022-05-2417:48:06
Google
osv.dev
9
Jenkins Config File Provider Plugin 3.7.0 and earlier does not perform permission checks in several HTTP endpoints.
This allows attackers with Overall/Read permission to enumerate configuration file IDs.
An enumeration of configuration file IDs in Jenkins Config File Provider Plugin 3.7.1 requires the appropriate permissions.
Related
redhatcve
redhatcve
CVE-2021-21645
2021-04-21 16:44:56
veracode
veracode
Information Disclosure
2021-06-08 12:38:33
osv
osv
CVE-2021-21645
2021-04-21 15:15:08
cve
cve
CVE-2021-21645
2021-04-21 15:15:08
github
github
alpinelinux
alpinelinux
CVE-2021-21645
2021-04-21 15:15:08
nvd
nvd
CVE-2021-21645
2021-04-21 15:15:08
cvelist
cvelist
CVE-2021-21645
2021-04-21 14:20:33
prion
prion
Design/Logic Flaw
2021-04-21 15:15:00
redhat
redhat
nessus
nessus
Jenkins Enterprise and Operations Center < 2.249.31.0.1-2 / 2.277.3.1-2 Multiple Vulnerabilities (CloudBees Security Advisory 2021-04-21)
2021-11-19 00:00:00
RHEL 7 / 8 : OpenShift Container Platform 4.7.13 (RHSA-2021:2122)
2022-09-15 00:00:00
RHEL 7 : OpenShift Container Platform 4.5.41 (RHSA-2021:2431)
2021-07-02 00:00:00