Vendor/product archive

jenkins / cloudbees_aws_credentials CVEs

Beta · best-effort

3 CVEs tagged to jenkins / cloudbees_aws_credentials — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to jenkins vendor archive

CVE-2022-27199

Published Mar 15, 2022

A missing permission check in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service usi…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-27198

Published Mar 15, 2022

A cross-site request forgery (CSRF) vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connec…

CVSS 8.0 · High

Vendor/product tagsBeta · best-effort

CVE-2021-21625

Published Mar 18, 2021

Jenkins CloudBees AWS Credentials Plugin 1.28 and earlier does not perform a permission check in a helper method for HTTP endpoints, allowing attackers with Overall/Read permissio…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1