CVE-2021-21625

Published: 2021-03-18T14:15Z

Last Modified: 2024-11-21T05:48Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Jenkins CloudBees AWS Credentials Plugin 1.28 and earlier does not perform a permission check in a helper method for HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of AWS credentials stored in Jenkins in some circumstances. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt