Executive brief
Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows enumerating credentials IDs
Affected products
- Maven com.xebialabs.deployit.ci:deployit-plugin
Junglewise Threat Intelligence
CVE-2021-21662: Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows enumerating credentials IDs
CVE-2021-21662 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: com.xebialabs.deployit.ci:deployit-plugin (Maven). Vendors: Maven.
Related threats
- CSRF vulnerability in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials
- Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials
- Incorrect permission check in XebiaLabs XL Deploy Plugin allows capturing credentials
- Missing permission check in Jenkins XebiaLabs XL Deploy Plugin
- Jenkins XebiaLabs XL Deploy Plugin vulnerable to Cross-site request forgery (CSRF)