Product · Jenkins Project

Jenkins Cloud Statistics Plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 4.3

CVE-2021-21631

Missing permission check in Jenkins Cloud Statistics Plugin

Jenkins Cloud Statistics Plugin 0.26 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission and knowledge of random activity IDs to view related provisioning exception error messages.

Jenkins Project Jenkins Cloud Statistics Plugin org.jenkins-ci.plugins:cloud-stats Web / CMS Maven

Mar 30, 2021