Lucene search

CVE-2021-21643

🗓️ 21 Apr 2021 15:08:15Reported by jenkinsType

Jenkins Config File Provider Plugin 3.7.0 and earlier allows enumeration of system-scoped credentials ID

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 22
Prion	Design/Logic Flaw	21 Apr 202115:15	–	prion
Cvelist	CVE-2021-21643	21 Apr 202114:20	–	cvelist
OSV	CVE-2021-21643	21 Apr 202115:15	–	osv
OSV	GHSA-3M3F-2323-64M7 Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs	24 May 202217:48	–	osv
OSV	RHBA-2021:2407 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.6.35 packages update	16 Sep 202405:55	–	osv
OSV	RHSA-2021:2122 Red Hat Security Advisory: OpenShift Container Platform 4.7.13 packages and security update	18 Sep 202402:36	–	osv
OSV	RHSA-2021:2431 Red Hat Security Advisory: OpenShift Container Platform 4.5.41 security update	16 Sep 202405:56	–	osv
OSV	RHSA-2021:2517 Red Hat Security Advisory: OpenShift Container Platform 3.11.462 bug fix and security update	16 Sep 202405:56	–	osv
AlpineLinux	CVE-2021-21643	21 Apr 202115:15	–	alpinelinux
CNVD	CloudBees Jenkins Config File Provider Plugin Privilege Check Vulnerability	23 Apr 202100:00	–	cnvd

Nvd

Node

jenkins config_file_providerRange≤3.7.0jenkins

[
  {
    "product": "Jenkins Config File Provider Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThanOrEqual": "3.7.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
jenkins	www.jenkins.io/security/advisory/2021-04-21/
openwall	www.openwall.com/lists/oss-security/2021/04/21/2

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Apr 2021 15:15Current

6.4Medium risk

Vulners AI Score6.4

CVSS24

CVSS36.5

EPSS0.0115