Jenkins Cloudbees Aws Credentials
3 CVEs affecting Jenkins Cloudbees Aws Credentials. Latest disclosed: 2022-03-15. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-27198 | High | 8.0 | 2022-03-15 | A cross-site request forgery (CSRF) vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read… |
CVE-2022-27199 | Medium | 4.3 | 2022-03-15 | A missing permission check in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect t… |
CVE-2021-21625 | Medium | 4.3 | 2021-03-18 | Jenkins CloudBees AWS Credentials Plugin 1.28 and earlier does not perform a permission check in a helper method for HTTP endpoints, allowing attackers with Ov… |