org.jenkins-ci.plugins:aws-credentials

Maven3 known CVEs affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting org.jenkins-ci.plugins:aws-credentialspage 1 of 1

CVE-2021-21625MEDIUMCVSS 4.3EG 4.3✓ Fixed in 1.28.1
2021-03-18
vulnerable: 1.10 ... 1.9 (22 versions)
Jenkins CloudBees AWS Credentials Plugin 1.28 and earlier does not perform a permission check in a helper method for HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of AWS credentials stored in …
CVE-2022-27198HIGHCVSS 8.0EG 8.0
2022-03-15
vulnerable: 1.10 ... 189.v3551d5642995 (31 versions)
A cross-site request forgery (CSRF) vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token.
CVE-2022-27199MEDIUMCVSS 4.3EG 4.3✓ Fixed in 191.vcb_f183ce58b_9
2022-03-15
vulnerable: 1.10 ... 189.v3551d5642995 (31 versions)
A missing permission check in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token.

Check whether org.jenkins-ci.plugins:aws-credentials is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.jenkins-ci.plugins:aws-credentials CVEs against the assets you own.

Start Free Scan →