org.jenkins-ci.plugins:aws-credentials

3 results · Feed

• Medium 4.3
  CVE-2022-27199

  Missing permission checks in AWS Credentials Plugin

  A missing permission check in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token.

  Jenkins Project Jenkins CloudBees AWS Credentials Plugin org.jenkins-ci.plugins:aws-credentials Web / CMS Maven
  Mar 15, 2022
• High 8.0
  CVE-2022-27198

  CSRF vulnerability in Jenkins CloudBees AWS Credentials Plugin

  A cross-site request forgery (CSRF) vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token.

  Jenkins Project Jenkins CloudBees AWS Credentials Plugin org.jenkins-ci.plugins:aws-credentials Web / CMS Maven
  Mar 15, 2022
• Medium 4.3
  CVE-2021-21625

  Missing permission checks in Jenkins CloudBees AWS Credentials Plugin allows enumerating credentials IDs

  Jenkins CloudBees AWS Credentials Plugin 1.28 and earlier does not perform a permission check in a helper method for HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of AWS credentials stored in Jenkins in some circ…

  Jenkins Project Jenkins CloudBees AWS Credentials Plugin org.jenkins-ci.plugins:aws-credentials Web / CMS Maven
  Mar 18, 2021