Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_s3_publisher_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins S3 Publisher Plugin (89a0b7b7-4264-5c6d-8af3-8b58526e445e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21651 vulnerable 2026-06-08 05:29:13.081699 Details available
Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to obtain the list of configured profiles.
Published: 2021-05-11T14:15:22.000Z
Updated: 2024-08-03T18:23:27.398Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21650 vulnerable 2026-06-08 05:29:13.080442 Details available
Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP endpoints and API models, allowing attackers with Item/Read permission to obtain information about artifacts uploaded to S3, if the optional Run/Artifacts permission is enabled.
Published: 2021-05-11T14:15:21.000Z
Updated: 2024-08-03T18:23:27.382Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2114 vulnerable 2026-06-08 05:24:58.917629 Details available
Jenkins S3 publisher Plugin 0.11.4 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
Published: 2020-02-12T14:35:42.000Z
Updated: 2024-08-04T07:01:40.926Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.