Junglewise Threat Intelligence

CVE-2021-21638: CSRF vulnerability in Jenkins Team Foundation Server Plugin allow capturing credentials

CVE-2021-21638 · Severity: low · CVSS 3.1 · Published 2022-05-24

Technologies: org.jenkins-ci.plugins:tfs (Maven). Vendors: Maven.

Executive brief

CSRF vulnerability in Jenkins Team Foundation Server Plugin allow capturing credentials

Affected products

Maven org.jenkins-ci.plugins:tfs

Related threats

Missing permission check in Jenkins Team Foundation Server Plugin allow capturing credentials
Missing permission check in Jenkins Team Foundation Server Plugin allows enumerating credentials IDs
Credentials stored in plain text by Jenkins tfs Plugin