CVE-2021-21662

A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins...

CVE-2021-21662

Summary: CVE-2021-21662 affects Jenkins XebiaLabs XL Deploy Plugin (≤10.0.1). Root cause: missing permission check in a form-validation path permits attackers with Overall/Read to enumerate credentials IDs stored in Jenkins. Impact: information disclosure of credential identifiers; could enable c...