Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Jenkins Team Foundation Server Plugin unspecified Clear all filters
TI-2021-04718 CVE-2021-21638 · GHSA-263q-5pj7-j6hj

Cross-site request forgery in Jenkins Team Foundation Server Plugin

Priority MEDIUM 40

A cross-site request forgery (CSRF) vulnerability in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained th…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00839 Published 2021-03-30 No fix listed CWE-352
TI-2021-04717 CVE-2021-21637 · GHSA-6364-jx4h-7564

Missing authorization in Jenkins Team Foundation Server Plugin

Priority LOW 31

A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtai…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00972 Published 2021-03-30 No fix listed CWE-862
TI-2021-04716 CVE-2021-21636 · GHSA-vg28-9f43-gmh5

Missing authorization in Jenkins Team Foundation Server Plugin

Priority LOW 21

A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00786 Published 2021-03-30 No fix listed CWE-862