Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Jenkins XebiaLabs XL Deploy Plugin unspecified Clear all filters
TI-2021-04744 CVE-2021-21664 · GHSA-jm4g-8rvq-v87j

Incorrect authorization in Jenkins XebiaLabs XL Deploy Plugin

Priority LOW 31

An incorrect permission check in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers with Generic Create permission to connect to an attacker-specified URL using attacker-specified credentials IDs obta…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00991 Published 2021-06-10 Fixed in 10.0.2 CWE-863
TI-2021-04743 CVE-2021-21663 · GHSA-6mpp-cm3v-23vv

Missing authorization in Jenkins XebiaLabs XL Deploy Plugin

Priority LOW 22

A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 7.5.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained t…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01001 Published 2021-06-10 Fixed in 10.0.2 CWE-862