CVE-2021-21636

CVE-2021-21636 concerns Jenkins Team Foundation Server Plugin (version 5.157.1 and earlier). A missing permission check in an HTTP endpoint allows attackers with Overall/Read permission to enumerate credentials IDs stored in Jenkins. This disclosure could enable credential access for subsequent e...