Design/Logic Flaw

2021-06-1015:15:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.2%

JSON

Jenkins Kubernetes CLI Plugin 1.10.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

CPENameOperatorVersion
kubernetesle1.10.0

CPE	Name	Operator	Version
	kubernetes	le	1.10.0

References

www.openwall.com/lists/oss-security/2021/06/10/14

www.jenkins.io/security/advisory/2021-06-10/