Junglewise Threat Intelligence

CVE-2021-21625: Missing permission checks in Jenkins CloudBees AWS Credentials Plugin allows enumerating credentials IDs

CVE-2021-21625 · Severity: low · CVSS 3.1 · Published 2022-05-24

Technologies: org.jenkins-ci.plugins:aws-credentials (Maven). Vendors: Maven.

Executive brief

Missing permission checks in Jenkins CloudBees AWS Credentials Plugin allows enumerating credentials IDs

Affected products

  • Maven org.jenkins-ci.plugins:aws-credentials

Related threats