org.jenkins-ci.plugins:kubernetes-cli

1 result · Clear filters · Feed

• Medium 4.3
  CVE-2021-21661

  Missing Authorization in Jenkins Kubernetes CLI Plugin

  Jenkins Kubernetes CLI Plugin 1.10.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

  Jenkins Project Jenkins Kubernetes CLI Plugin org.jenkins-ci.plugins:kubernetes-cli Web / CMS Maven
  Jun 10, 2021