6 matches found
br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.1.0, <=0.3.15), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +10 more potentially affected by CVE-2021-21625 via org.jenkins-ci.plugins:aws-credentials (>=1.9, <=1.24)
org.jenkins-ci.plugins:aws-credentials MAVEN version =1.9, =0.1.0, =1.0, =1.0-beta-1, =1.0-beta-1, =0.3, =1.2.2, =1.0.0, =1.32, =1.40 - org.jenkins-ci.plugins:jobcacher 1.0 Source cves: CVE-2021-21625 Source advisory: GHSA-JWR9-H4JM-C9CH...
br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.1.0, <=0.3.15), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +10 more potentially affected by CVE-2021-21625 via org.jenkins-ci.plugins:aws-credentials (>=1.9, <=1.24)
org.jenkins-ci.plugins:aws-credentials MAVEN version =1.9, =0.1.0, =1.0, =1.0-beta-1, =1.0-beta-1, =0.3, =1.2.2, =1.0.0, =1.32, =1.40 - org.jenkins-ci.plugins:jobcacher 1.0 Source cves: CVE-2021-21625 Source advisory: OSV:GHSA-JWR9-H4JM-C9CH...
CVE-2021-21625
creationtimestamp| type| source ---|---|--- 2021-03-18 17:32:15+00:00| seen| https://t.me/cibsecurity/25100...
CVE-2021-21625
Jenkins CloudBees AWS Credentials Plugin 1.28 and earlier does not perform a permission check in a helper method for HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of AWS credentials stored in Jenkins in some circumstances...
CVE-2021-21625
Jenkins CloudBees AWS Credentials Plugin 1.28 and earlier does not perform a permission check in a helper method for HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of AWS credentials stored in Jenkins in some circumstances...
CVE-2021-21625
CVE-2021-21625 affects Jenkins CloudBees AWS Credentials Plugin, version 1.28 and earlier. The underlying issue is a missing permission check in a helper method for HTTP endpoints, enabling attackers with Overall/Read permission to enumerate AWS credentials IDs stored in Jenkins under certain con...