Lucene search

K
osvGoogleOSV:CVE-2021-21632
HistoryMar 30, 2021 - 12:16 p.m.

CVE-2021-21632

2021-03-3012:16:10
Google
osv.dev
7
jenkins
owasp dependency-track
permission check
unauthorized access
stored credentials

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

28.4%

A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins.

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

28.4%