CVE-2021-21612 in ECU-TEST Plugin

الملخص

بحسب MITRE • 14/01/2021

Jenkins TraceTronic ECU-TEST Plugin 2.23.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• حجز: 04/01/2021
• إفشاء: 14/01/2021
• الاعتدال: تمت الموافقة
• إدخال: VDB-167966
• CPE: جاهز
• CWE: CWE-256 (مؤكد)
• CVSS: 5.5 (NVD)
• EPSS: 0.00334
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Telecommunication

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-21612
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-21612
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-21612/