CVE-2021-21636
Assigner: jenkins
Published: 2021-03-30T11:10:39
State: PUBLISHED
affected: product: Jenkins Team Foundation Server Plugin
vendor: Jenkins project
versions: lessThanOrEqual: 5.157.1
status: affected
version: unspecified
versionType: custom
lessThan: unspecified
status: unknown
version: next of 5.157.1
versionType: custom
descriptions: value: A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.