CVE-2021-21643: Medium severity jenkins config file provider vulnerability
A flaw was found in the config-file-provider Jenkins plugin. The plugin does not correctly perform permission checks in several HTTP endpoints, as a consequence an attacker with global Job/Configure permission can enumerate system-scoped credentials IDs of credentials stored in Jenkins.
Other sources
Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints.
This allows attackers with global Job/Configure permission to enumerate system-scoped credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability.
— Red Hat
Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints, allowing attackers with global Job/Configure permission to enumerate system-scoped credentials IDs of credentials stored in Jenkins.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-21643.
What is the severity of CVE-2021-21643?
The severity of CVE-2021-21643 is medium with a CVSS score of 6.5.
How does CVE-2021-21643 affect Jenkins Config File Provider Plugin?
CVE-2021-21643 affects Jenkins Config File Provider Plugin version 3.7.0 and earlier.
How can an attacker exploit CVE-2021-21643?
An attacker with global Job/Configure permission can exploit CVE-2021-21643 to enumerate system-scoped credentials IDs stored in Jenkins.
How can I remediate CVE-2021-21643?
To remediate CVE-2021-21643, upgrade to Jenkins Config File Provider Plugin version 3.7.1 or later.