Jenkins Project Jenkins S3 Publisher Plugin
3 CVEs affecting Jenkins Project Jenkins S3 Publisher Plugin. Latest disclosed: 2021-05-11. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-2114 | High | 7.5 | 2020-02-12 | Jenkins S3 publisher Plugin 0.11.4 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially res… |
CVE-2021-21651 | Medium | 4.3 | 2021-05-11 | Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to obta… |
CVE-2021-21650 | Medium | 4.3 | 2021-05-11 | Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP endpoints and API models, allowing attackers wi… |