Lucene search

K
osvGoogleOSV:CVE-2021-21653
HistoryMay 11, 2021 - 3:15 p.m.

CVE-2021-21653

2021-05-1115:15:08
Google
osv.dev
11
jenkins xray
permission check
http endpoint
credential enumeration
software

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

22.0%

Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier does not perform a permission check in an HTTP endpoint, allowing with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

22.0%

Related for OSV:CVE-2021-21653