CVE-2021-21661
Assigner: jenkins
Published: 2021-06-10T14:25:19
State: PUBLISHED
affected: product: Jenkins Kubernetes CLI Plugin
vendor: Jenkins project
versions: lessThanOrEqual: 1.10.0
status: affected
version: unspecified
versionType: custom
descriptions: value: Jenkins Kubernetes CLI Plugin 1.10.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.