CVE-2021-21651

The CVE-2021-21651 issue affects Jenkins S3 publisher Plugin versions 0.11.6 and earlier. A missing permission check in an HTTP endpoint allows users with Overall/Read privileges to obtain the list of configured profiles. A fix is available in version 0.11.7 (and 0.11.5.1) where permission checks...