org.jenkins-ci.plugins:jclouds-jenkins (>=2.11, <=2.13), org.jenkinsci.plugins:managed-scripts (1.2.4) potentially affected by CVE-2021-21645 via org.jenkins-ci.plugins:config-file-provider (2.13)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:jclouds-jenkins =2.11, =2.13 -...

org.jenkins-ci.plugins:pipeline-dependency-walker (1.0.0) potentially affected by CVE-2021-21645 via org.jenkins-ci.plugins:config-file-provider (2.9.3)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:pipeline-dependency-walker 1.0.0 Source cves:...

org.jenkins-ci.plugins:ivy (>=1.23, <=1.24) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.5)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:ivy =1.23, =1.24 Source cves: CVE-2021-21643 Source...

org.jenkins-ci.plugins:jclouds-jenkins (>=2.11, <=2.13), org.jenkinsci.plugins:managed-scripts (1.2.4) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.13)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:jclouds-jenkins =2.11, =2.13 -...

org.jenkins-ci.plugins:nodejs (>=1.2.2, <=1.2.4), org.jenkins-ci.plugins:pipeline-maven (>=3.0.0-beta-1, <=3.5.12) +1 more potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.16.0)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.2.2, =3.0.0-beta-1, =3.5.12 -...

org.jenkins-ci.plugins:nodejs (>=1.2.2, <=1.2.4), org.jenkins-ci.plugins:pipeline-maven (>=3.0.0-beta-1, <=3.5.12) +1 more potentially affected by CVE-2021-21645 via org.jenkins-ci.plugins:config-file-provider (2.16.0)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.2.2, =3.0.0-beta-1, =3.5.12 -...

org.jenkinsci.plugins:managed-scripts (1.2.5-beta) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.14-beta)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.14-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkinsci.plugins:managed-scripts 1.2.5-beta Source cves:...

Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs

Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints. This allows attackers with global Job/Configure permission to enumerate system-scoped credentials IDs of credentials stored in Jenkins. Those can be used as part of an...

org.jenkins-ci.plugins:nodejs (>=1.0, <=1.2.1) potentially affected by CVE-2021-21645 via org.jenkins-ci.plugins:config-file-provider (2.15.5)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.0, =1.2.1 Source cves: CVE-2021-21645...

org.jenkins-ci.plugins:job-dsl (>=1.25, <=1.32) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.7)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:job-dsl =1.25, =1.32 Source cves: CVE-2021-21643...

org.jenkins-ci.plugins:nodejs (>=1.2.5, <=1.2.6) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.16.4)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.2.5, =1.2.6 Source cves: CVE-2021-21643...

org.jenkins-ci.plugins:nodejs (>=1.0, <=1.2.1) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.15.5)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.0, =1.2.1 Source cves: CVE-2021-21643...

org.jenkinsci.plugins:managed-scripts (1.2.5-beta) potentially affected by CVE-2021-21642 via org.jenkins-ci.plugins:config-file-provider (2.14-beta)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.14-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkinsci.plugins:managed-scripts 1.2.5-beta Source cves:...

org.jenkinsci.plugins:managed-scripts (1.4) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.16.3)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkinsci.plugins:managed-scripts 1.4 Source cves: CVE-2021-21643...

org.jenkins-ci.plugins:jclouds-jenkins (>=2.14, <=2.22) potentially affected by CVE-2021-21643 via org.jenkins-ci.plugins:config-file-provider (2.15.6)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:jclouds-jenkins =2.14, =2.22 Source cves:...

com.lookout.jenkins:environment-script (1.2.5), org.jenkins-ci.plugins:ivy (>=1.25, <=1.26) +1 more potentially affected by CVE-2021-21642 via org.jenkins-ci.plugins:config-file-provider (2.7.5)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - com.lookout.jenkins:environment-script 1.2.5 - org.jenkins-ci.plugins:ivy...

org.jenkins-ci.plugins:pipeline-dependency-walker (1.0.0) potentially affected by CVE-2021-21642 via org.jenkins-ci.plugins:config-file-provider (2.9.3)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:pipeline-dependency-walker 1.0.0 Source cves:...

org.jenkins-ci.plugins:pipeline-maven (>=2.3.0-beta-1, <=2.5.2) potentially affected by CVE-2021-21642 via org.jenkins-ci.plugins:config-file-provider (2.15.7)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.15.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:pipeline-maven =2.3.0-beta-1, =2.5.2 Source cves:...

org.jenkins-ci.plugins:nodejs (>=1.2.5, <=1.2.6) potentially affected by CVE-2021-21642 via org.jenkins-ci.plugins:config-file-provider (2.16.4)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:nodejs =1.2.5, =1.2.6 Source cves: CVE-2021-21642...

org.jenkins-ci.plugins:job-dsl (>=1.25, <=1.32) potentially affected by CVE-2021-21642 via org.jenkins-ci.plugins:config-file-provider (2.7)

org.jenkins-ci.plugins:config-file-provider MAVEN version 2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:config-file-provider and may be impacted: - org.jenkins-ci.plugins:job-dsl =1.25, =1.32 Source cves: CVE-2021-21642...