CVE-2021-21636

Description

Missing permission check in Jenkins Team Foundation Server Plugin allows enumerating credentials IDs

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-21636
• https://github.com/jenkinsci/tfs-plugin
• https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2283%20(1)
• http://www.openwall.com/lists/oss-security/2021/03/30/1

💬 Discuss CVE-2021-21636 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.