Executive brief
Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs
Affected products
- Maven org.jenkins-ci.plugins:config-file-provider
Junglewise Threat Intelligence
CVE-2021-21643: Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs
CVE-2021-21643 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:config-file-provider (Maven). Vendors: Maven.
Related threats
- Jenkins Config File Provider Plugin improper credential masking vulnerability
- Missing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs
- XML External Entity Reference vulnerability in Jenkins Config File Provider Plugin
- CSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files
- Stored XSS vulnerability in Config File Provider Plugin