From 9b3fb5eab2bc4523b283ce0853bf9a7a8c8b51b6 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 27 Oct 2023 15:30:13 +0000 Subject: [PATCH] Publish GHSA-h246-g39x-7vmx --- .../2022/05/GHSA-h246-g39x-7vmx/GHSA-h246-g39x-7vmx.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2022/05/GHSA-h246-g39x-7vmx/GHSA-h246-g39x-7vmx.json b/advisories/github-reviewed/2022/05/GHSA-h246-g39x-7vmx/GHSA-h246-g39x-7vmx.json index 9b1911019c2..03c9dff7f44 100644 --- a/advisories/github-reviewed/2022/05/GHSA-h246-g39x-7vmx/GHSA-h246-g39x-7vmx.json +++ b/advisories/github-reviewed/2022/05/GHSA-h246-g39x-7vmx/GHSA-h246-g39x-7vmx.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-h246-g39x-7vmx", - "modified": "2022-12-14T16:21:59Z", + "modified": "2023-10-27T15:28:59Z", "published": "2022-05-24T22:01:39Z", "aliases": [ "CVE-2021-21662" ], "summary": "Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows enumerating credentials IDs", - "details": "XebiaLabs XL Deploy Plugin 10.0.1 and earlier does not perform a permission check in a method implementing form validation.\n\nThis allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability.\n\nAn enumeration of credentials IDs in XebiaLabs XL Deploy Plugin 10.0.2 requires the appropriate permissions.", + "details": "Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier does not perform a permission check in a method implementing form validation.\n\nThis allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability.\n\nAn enumeration of credentials IDs in XebiaLabs XL Deploy Plugin 10.0.2 requires the appropriate permissions.", "severity": [ { "type": "CVSS_V3",