Jenkins Project Jenkins Kubernetes Cli Plugin vulnerabilities

1 known vulnerability affecting jenkins_project/jenkins_kubernetes_cli_plugin.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2021-21661MEDIUMCVSS 4.3≥ unspecified, ≤ 1.10.02021-06-10

CVE-2021-21661 [MEDIUM] CVE-2021-21661: Jenkins Kubernetes CLI Plugin 1.10.0 and earlier does not perform permission checks in several HTTP Jenkins Kubernetes CLI Plugin 1.10.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.