Lucene search
GoogleOSV:GHSA-6364-JX4H-7564HistoryMay 24, 2022 - 5:45 p.m.
Missing permission check in Jenkins Team Foundation Server Plugin allow capturing credentials
2022-05-2417:45:46
Google
osv.dev
7
jenkins
team foundation server
permission check
credentials
security vulnerability
EPSS
0.001
Percentile
28.4%
A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Related
nvd
nvd
CVE-2021-21637
2021-03-30 12:16:10
prion
prion
Design/Logic Flaw
2021-03-30 12:16:00
osv
osv
CVE-2021-21637
2021-03-30 12:16:10
alpinelinux
alpinelinux
CVE-2021-21637
2021-03-30 12:16:10
github
github
cve
cve
CVE-2021-21637
2021-03-30 12:16:10
cvelist
cvelist
CVE-2021-21637
2021-03-30 11:10:40
nessus
nessus