CVE-2021-21661

Jenkins Kubernetes CLI Plugin 1.10.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission…

published June 10, 2021

CVSS
—
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

Jenkins Kubernetes CLI Plugin 1.10.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01640 · 76.2th percentile
Published
2021-06-10T14:25Z
EPSS history
Timeline
  • 10 JUN 14:25Z
    Jenkins Kubernetes CLI Plugin 1.10.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission…
    cvelistv5