Jenkins Team Foundation Server vulnerabilities
4 vulnerabilities
Known vulnerabilities in Jenkins Team Foundation Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2021-21637jenkins project · jenkins team foundation server plugin +2 morejenkins project jenkins team foundation server pluginA missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.EPSS0.97%HighCVE-2021-21638jenkins project · jenkins team foundation server plugin +2 morejenkins project jenkins team foundation server pluginA cross-site request forgery (CSRF) vulnerability in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.EPSS0.84%MediumCVE-2021-21636jenkins project · jenkins team foundation server plugin +2 morejenkins project jenkins team foundation server pluginA missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.EPSS0.79%LowCVE-2020-2249jenkins project · jenkins team foundation server plugin +2 morejenkins project jenkins team foundation server pluginJenkins Team Foundation Server Plugin 5.157.1 and earlier stores a webhook secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.EPSS0.26%