Every CVE Search/ Get API key

CVE-2021-21643

Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs

6.5 MediumFix available

Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints, allowing attackers with global Job/Configure permission to enumerate system-scoped credentials IDs of credentials stored in Jenkins.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

1.08%Up 0.5 points since Apr 27, 2021
90%50%10%1%

What each source reports

NVD Score used 6.5

Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints, allowing attackers with global Job/Configure permission to enumerate system-scoped credentials IDs of credentials stored in Jenkins.

Record
CVE-2021-21643
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints, allowing attackers with global Job/Configure permission to enumerate system-scoped credentials IDs of credentials stored in Jenkins.

Record
CVE-2021-21643
Updated
2026-11-02
EUVDEUVD-2022-2206 No score

Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints, allowing attackers with global Job/Configure permission to enumerate system-scoped credentials IDs of credentials stored in Jenkins.

Record
EUVD-2022-2206
Updated
2026-11-03
GitHub AdvisoriesGHSA-3m3f-2323-64m7 6.5

Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs

Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints.

This allows attackers with global Job/Configure permission to enumerate system-scoped credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability.

An enumeration of system-scoped credentials IDs in Jenkins Config File Provider Plugin 3.7.1 requires Overall/Administer permission.

Record
GHSA-3m3f-2323-64m7
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-863
Updated
2026-11-02
OSV 6.5

Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints, allowing attackers with global Job/Configure permission to enumerate system-scoped credentials IDs of credentials stored in Jenkins.

Record
CVE-2021-21643
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVGHSA-3m3f-2323-64m7 6.5

Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs

Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints.

This allows attackers with global Job/Configure permission to enumerate system-scoped credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability.

An enumeration of system-scoped credentials IDs in Jenkins Config File Provider Plugin 3.7.1 requires Overall/Administer permission.

Record
GHSA-3m3f-2323-64m7
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-863
Updated
2026-11-02
Show 5 moreShow less
OSVRHBA-2021:2407 8.1

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.6.35 packages update

Record
RHBA-2021:2407
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2021:2122 8.1

Red Hat Security Advisory: OpenShift Container Platform 4.7.13 packages and security update

Record
RHSA-2021:2122
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2021:2431 8.1

Red Hat Security Advisory: OpenShift Container Platform 4.5.41 security update

Record
RHSA-2021:2431
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2021:2437 8.6

Red Hat Security Advisory: OpenShift Container Platform 4.8.2 packages and security update

Record
RHSA-2021:2437
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2021:2517 8.1

Red Hat Security Advisory: OpenShift Container Platform 3.11.462 bug fix and security update

Record
RHSA-2021:2517
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
org.jenkins-ci.plugins:config-file-provider
Maven
 through 3.7.0
3.7.1
org.jenkins-ci.plugins:config-file-provider
Maven
 before 3.7.1, plus listed versions
1.01.11.21.51.6.1
Show 45 moreShow less
1.9.12.02.12.1.12.10.02.10.12.112.132.14-beta2.14.1-beta2.14.2-beta2.152.15.12.15.2-beta2.15.32.15.3-beta2.15.42.15.52.15.62.15.72.16.02.16.12.16.22.16.32.16.42.172.182.2.12.32.42.52.5.12.62.6.12.6.22.72.7.12.7.42.7.52.8.12.9.22.9.33.03.13.2
3.7.1
jenkins-2-plugins
Red Hat:openshift:4.6::el8
From an advisory covering 4 CVEs
 before 0:4.6.1623162648-1.el8
0:4.6.1623162648-1.el8
cri-o
Red Hat:openshift:4.7::el7
From an advisory covering 6 CVEs
 before 0:1.20.2-12.rhaos4.7.git9f7be76.el7
0:1.20.2-12.rhaos4.7.git9f7be76.el7
cri-o-debuginfo
Red Hat:openshift:4.7::el7
From an advisory covering 6 CVEs
 before 0:1.20.2-12.rhaos4.7.git9f7be76.el7
0:1.20.2-12.rhaos4.7.git9f7be76.el7
cri-tools
Red Hat:openshift:4.7::el7
From an advisory covering 6 CVEs
 before 0:1.20.0-3.el7
0:1.20.0-3.el7
cri-tools-debuginfo
Red Hat:openshift:4.7::el7
From an advisory covering 6 CVEs
 before 0:1.20.0-3.el7
0:1.20.0-3.el7
cri-o
Red Hat:openshift:4.7::el8
From an advisory covering 6 CVEs
 before 0:1.20.2-12.rhaos4.7.git9f7be76.el8
0:1.20.2-12.rhaos4.7.git9f7be76.el8
cri-o-debuginfo
Red Hat:openshift:4.7::el8
From an advisory covering 6 CVEs
 before 0:1.20.2-12.rhaos4.7.git9f7be76.el8
0:1.20.2-12.rhaos4.7.git9f7be76.el8
cri-o-debugsource
Red Hat:openshift:4.7::el8
From an advisory covering 6 CVEs
 before 0:1.20.2-12.rhaos4.7.git9f7be76.el8
0:1.20.2-12.rhaos4.7.git9f7be76.el8
Show 186 moreShow less
Affected packages
PackageAffectedFixed
jenkins-2-plugins
Red Hat:openshift:4.7::el8
From an advisory covering 6 CVEs
 before 0:4.7.1621361158-1.el8
0:4.7.1621361158-1.el8
redhat-release-coreos
Red Hat:openshift:4.7::el8
From an advisory covering 6 CVEs
 before 0:47.83-2.el8
0:47.83-2.el8
jenkins
Red Hat:openshift:4.5::el7
From an advisory covering 7 CVEs
 before 0:2.277.3.1623846768-1.el7
0:2.277.3.1623846768-1.el7
jenkins-2-plugins
Red Hat:openshift:4.5::el7
From an advisory covering 7 CVEs
 before 0:4.5.1623326336-1.el7
0:4.5.1623326336-1.el7
ignition
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
ignition-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
ignition-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
ignition-validate
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
ignition-validate-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
openshift
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7
0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7
openshift-clients
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7
0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7
openshift-clients-redistributable
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7
0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7
openshift-hyperkube
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7
0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7
openshift
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8
0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8
openshift-clients
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8
0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8
openshift-clients-redistributable
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8
0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8
0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8
cri-o
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.21.2-5.rhaos4.8.gitb27d974.el7
0:1.21.2-5.rhaos4.8.gitb27d974.el7
cri-o-debuginfo
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.21.2-5.rhaos4.8.gitb27d974.el7
0:1.21.2-5.rhaos4.8.gitb27d974.el7
cri-tools
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.21.0-2.el7
0:1.21.0-2.el7
cri-tools-debuginfo
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.21.0-2.el7
0:1.21.0-2.el7
haproxy
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:2.2.13-1.el7
0:2.2.13-1.el7
haproxy-debuginfo
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:2.2.13-1.el7
0:2.2.13-1.el7
openshift-ansible
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7
0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7
openshift-ansible-test
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7
0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7
runc
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.0.0-98.rhaos4.8.gitcd80260.el7
0:1.0.0-98.rhaos4.8.gitcd80260.el7
runc-debuginfo
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.0.0-98.rhaos4.8.gitcd80260.el7
0:1.0.0-98.rhaos4.8.gitcd80260.el7
afterburn
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.0-1.rhaos4.8.el8
0:5.0.0-1.rhaos4.8.el8
afterburn-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.0-1.rhaos4.8.el8
0:5.0.0-1.rhaos4.8.el8
atomic-openshift-service-idler
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8
0:4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8
butane
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.12.1-1.rhaos4.8.el8
0:0.12.1-1.rhaos4.8.el8
butane-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.12.1-1.rhaos4.8.el8
0:0.12.1-1.rhaos4.8.el8
console-login-helper-messages
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.20.3-1.rhaos4.8.el8
0:0.20.3-1.rhaos4.8.el8
console-login-helper-messages-issuegen
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.20.3-1.rhaos4.8.el8
0:0.20.3-1.rhaos4.8.el8
console-login-helper-messages-profile
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.20.3-1.rhaos4.8.el8
0:0.20.3-1.rhaos4.8.el8
coreos-installer
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
coreos-installer-bootinfra
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
coreos-installer-bootinfra-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
coreos-installer-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
coreos-installer-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
cri-o
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.2-5.rhaos4.8.gitb27d974.el8
0:1.21.2-5.rhaos4.8.gitb27d974.el8
cri-o-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.2-5.rhaos4.8.gitb27d974.el8
0:1.21.2-5.rhaos4.8.gitb27d974.el8
cri-o-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.2-5.rhaos4.8.gitb27d974.el8
0:1.21.2-5.rhaos4.8.gitb27d974.el8
cri-tools
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.0-2.el8
0:1.21.0-2.el8
cri-tools-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.0-2.el8
0:1.21.0-2.el8
cri-tools-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.0-2.el8
0:1.21.0-2.el8
haproxy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.13-1.el8
0:2.2.13-1.el8
haproxy-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.13-1.el8
0:2.2.13-1.el8
ironic-images
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2021.1-20210614.1.el8
0:2021.1-20210614.1.el8
ironic-images-all
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2021.1-20210614.1.el8
0:2021.1-20210614.1.el8
ironic-images-ipa-ppc64le
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2021.1-20210614.1.el8
0:2021.1-20210614.1.el8
ironic-images-ipa-x86_64
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2021.1-20210614.1.el8
0:2021.1-20210614.1.el8
jenkins
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.289.1.1624020353-1.el8
0:2.289.1.1624020353-1.el8
jenkins-2-plugins
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.1624022417-1.el8
0:4.8.1624022417-1.el8
kata-containers
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.1.0-4.el8
0:2.1.0-4.el8
openshift-kuryr
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
openshift-kuryr-cni
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
openshift-kuryr-common
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
openshift-kuryr-controller
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
openstack-ironic
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
openstack-ironic-api
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
openstack-ironic-common
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
openstack-ironic-conductor
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
openstack-ironic-inspector
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
openstack-ironic-inspector-api
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
openstack-ironic-inspector-conductor
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
openstack-ironic-inspector-dnsmasq
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
openstack-ironic-python-agent
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:7.0.2-0.20210611153100.bfa97cb.el8
0:7.0.2-0.20210611153100.bfa97cb.el8
openvswitch2.15
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
openvswitch2.15-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
openvswitch2.15-devel
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
openvswitch2.15-ipsec
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
ostree
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-devel
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-grub2
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-libs
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-libs-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ovn2.13
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-central
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-central-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-host
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-host-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-vtep
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-vtep-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
podman
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-catatonit-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-docker
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-plugins-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-remote
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-remote-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
python-debtcollector
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.0-0.20210324220630.649189d.el8
0:2.2.0-0.20210324220630.649189d.el8
python-eventlet
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.25.2-4.el8
0:0.25.2-4.el8
python-hardware
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.27.0-0.20210406121246.756fedb.el8
0:0.27.0-0.20210406121246.756fedb.el8
python-ironic-lib
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.6.2-0.20210608101214.ca2e4ba.el8
0:4.6.2-0.20210608101214.ca2e4ba.el8
python-ironic-prometheus-exporter
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.1-0.20210325143713.70e39c8.el8
0:2.2.1-0.20210325143713.70e39c8.el8
python-jsonschema
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.2.0-5.el8ost
0:3.2.0-5.el8ost
python-keystoneauth1
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.3.0-0.20210325001456.6a66271.el8
0:4.3.0-0.20210325001456.6a66271.el8
python-kubernetes
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:12.0.1-1.el8
0:12.0.1-1.el8
python-openshift
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:0.12.1-1.el8
1:0.12.1-1.el8
python-openstacksdk
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.53.0-0.20210325011601.4629245.el8
0:0.53.0-0.20210325011601.4629245.el8
python-oslo-concurrency
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210325004915.7dcf9e9.el8
0:4.4.0-0.20210325004915.7dcf9e9.el8
python-oslo-concurrency-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210325004915.7dcf9e9.el8
0:4.4.0-0.20210325004915.7dcf9e9.el8
python-oslo-config
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 2:8.5.0-0.20210325050501.cfa2564.el8
2:8.5.0-0.20210325050501.cfa2564.el8
python-oslo-context
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.2.0-0.20210325043103.0d02866.el8
0:3.2.0-0.20210325043103.0d02866.el8
python-oslo-db
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:8.5.0-0.20210325041241.503db60.el8
0:8.5.0-0.20210325041241.503db60.el8
python-oslo-db-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:8.5.0-0.20210325041241.503db60.el8
0:8.5.0-0.20210325041241.503db60.el8
python-oslo-i18n
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.1-0.20210324221600.73187bd.el8
0:5.0.1-0.20210324221600.73187bd.el8
python-oslo-i18n-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.1-0.20210324221600.73187bd.el8
0:5.0.1-0.20210324221600.73187bd.el8
python-oslo-log
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210409081224.9b29c90.el8
0:4.4.0-0.20210409081224.9b29c90.el8
python-oslo-log-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210409081224.9b29c90.el8
0:4.4.0-0.20210409081224.9b29c90.el8
python-oslo-policy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.0-0.20210325051823.d853485.el8
0:3.7.0-0.20210325051823.d853485.el8
python-oslo-policy-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.0-0.20210325051823.d853485.el8
0:3.7.0-0.20210325051823.d853485.el8
python-oslo-serialization
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.1.0-0.20210325012242.8445e61.el8
0:4.1.0-0.20210325012242.8445e61.el8
python-oslo-service
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.5.0-0.20210325014731.d25e454.el8
0:2.5.0-0.20210325014731.d25e454.el8
python-oslo-upgradecheck
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.3.0-0.20210325003851.9f95a6e.el8
0:1.3.0-0.20210325003851.9f95a6e.el8
python-oslo-utils
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-0.20210325043201.3288539.el8
0:4.8.0-0.20210325043201.3288539.el8
python-oslo-utils-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-0.20210325043201.3288539.el8
0:4.8.0-0.20210325043201.3288539.el8
python-pyrsistent
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.16.0-3.el8ost
0:0.16.0-3.el8ost
python-stevedore
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.3.0-0.20210325001012.7d7154f.el8
0:3.3.0-0.20210325001012.7d7154f.el8
python-sushy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.1-0.20210428165244.bc49878.el8
0:3.7.1-0.20210428165244.bc49878.el8
python-sushy-oem-idrac
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-0.20210326152858.83b7eb0.el8
0:2.0.1-0.20210326152858.83b7eb0.el8
python-tooz
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.8.0-0.20210324235001.54448e9.el8
0:2.8.0-0.20210324235001.54448e9.el8
python3-debtcollector
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.0-0.20210324220630.649189d.el8
0:2.2.0-0.20210324220630.649189d.el8
python3-eventlet
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.25.2-4.el8
0:0.25.2-4.el8
python3-hardware
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.27.0-0.20210406121246.756fedb.el8
0:0.27.0-0.20210406121246.756fedb.el8
python3-hardware-detect
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.27.0-0.20210406121246.756fedb.el8
0:0.27.0-0.20210406121246.756fedb.el8
python3-ironic-inspector-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
python3-ironic-lib
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.6.2-0.20210608101214.ca2e4ba.el8
0:4.6.2-0.20210608101214.ca2e4ba.el8
python3-ironic-prometheus-exporter
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.1-0.20210325143713.70e39c8.el8
0:2.2.1-0.20210325143713.70e39c8.el8
python3-ironic-python-agent
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:7.0.2-0.20210611153100.bfa97cb.el8
0:7.0.2-0.20210611153100.bfa97cb.el8
python3-ironic-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
python3-jsonschema
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.2.0-5.el8ost
0:3.2.0-5.el8ost
python3-keystoneauth1
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.3.0-0.20210325001456.6a66271.el8
0:4.3.0-0.20210325001456.6a66271.el8
python3-kubernetes
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:12.0.1-1.el8
0:12.0.1-1.el8
python3-kubernetes-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:12.0.1-1.el8
0:12.0.1-1.el8
python3-kuryr-kubernetes
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
python3-openshift
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:0.12.1-1.el8
1:0.12.1-1.el8
python3-openstacksdk
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.53.0-0.20210325011601.4629245.el8
0:0.53.0-0.20210325011601.4629245.el8
python3-openstacksdk-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.53.0-0.20210325011601.4629245.el8
0:0.53.0-0.20210325011601.4629245.el8
python3-openvswitch2.15
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
python3-openvswitch2.15-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
python3-oslo-concurrency
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210325004915.7dcf9e9.el8
0:4.4.0-0.20210325004915.7dcf9e9.el8
python3-oslo-concurrency-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210325004915.7dcf9e9.el8
0:4.4.0-0.20210325004915.7dcf9e9.el8
python3-oslo-config
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 2:8.5.0-0.20210325050501.cfa2564.el8
2:8.5.0-0.20210325050501.cfa2564.el8
python3-oslo-context
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.2.0-0.20210325043103.0d02866.el8
0:3.2.0-0.20210325043103.0d02866.el8
python3-oslo-db
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:8.5.0-0.20210325041241.503db60.el8
0:8.5.0-0.20210325041241.503db60.el8
python3-oslo-db-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:8.5.0-0.20210325041241.503db60.el8
0:8.5.0-0.20210325041241.503db60.el8
python3-oslo-i18n
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.1-0.20210324221600.73187bd.el8
0:5.0.1-0.20210324221600.73187bd.el8
python3-oslo-log
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210409081224.9b29c90.el8
0:4.4.0-0.20210409081224.9b29c90.el8
python3-oslo-log-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210409081224.9b29c90.el8
0:4.4.0-0.20210409081224.9b29c90.el8
python3-oslo-policy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.0-0.20210325051823.d853485.el8
0:3.7.0-0.20210325051823.d853485.el8
python3-oslo-serialization
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.1.0-0.20210325012242.8445e61.el8
0:4.1.0-0.20210325012242.8445e61.el8
python3-oslo-serialization-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.1.0-0.20210325012242.8445e61.el8
0:4.1.0-0.20210325012242.8445e61.el8
python3-oslo-service
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.5.0-0.20210325014731.d25e454.el8
0:2.5.0-0.20210325014731.d25e454.el8
python3-oslo-service-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.5.0-0.20210325014731.d25e454.el8
0:2.5.0-0.20210325014731.d25e454.el8
python3-oslo-upgradecheck
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.3.0-0.20210325003851.9f95a6e.el8
0:1.3.0-0.20210325003851.9f95a6e.el8
python3-oslo-utils
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-0.20210325043201.3288539.el8
0:4.8.0-0.20210325043201.3288539.el8
python3-oslo-utils-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-0.20210325043201.3288539.el8
0:4.8.0-0.20210325043201.3288539.el8
python3-pyrsistent
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.16.0-3.el8ost
0:0.16.0-3.el8ost
python3-pyrsistent-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.16.0-3.el8ost
0:0.16.0-3.el8ost
python3-stevedore
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.3.0-0.20210325001012.7d7154f.el8
0:3.3.0-0.20210325001012.7d7154f.el8
python3-sushy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.1-0.20210428165244.bc49878.el8
0:3.7.1-0.20210428165244.bc49878.el8
python3-sushy-oem-idrac
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-0.20210326152858.83b7eb0.el8
0:2.0.1-0.20210326152858.83b7eb0.el8
python3-sushy-oem-idrac-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-0.20210326152858.83b7eb0.el8
0:2.0.1-0.20210326152858.83b7eb0.el8
python3-sushy-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.1-0.20210428165244.bc49878.el8
0:3.7.1-0.20210428165244.bc49878.el8
python3-tooz
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.8.0-0.20210324235001.54448e9.el8
0:2.8.0-0.20210324235001.54448e9.el8
redhat-release-coreos
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:48.84-4.el8
0:48.84-4.el8
rteval-loads
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.4-12.el8
0:1.4-12.el8
rteval-loads-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.4-12.el8
0:1.4-12.el8
runc
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-98.rhaos4.8.gitcd80260.el8
0:1.0.0-98.rhaos4.8.gitcd80260.el8
runc-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-98.rhaos4.8.gitcd80260.el8
0:1.0.0-98.rhaos4.8.gitcd80260.el8
runc-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-98.rhaos4.8.gitcd80260.el8
0:1.0.0-98.rhaos4.8.gitcd80260.el8
rust-afterburn
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.0-1.rhaos4.8.el8
0:5.0.0-1.rhaos4.8.el8
rust-afterburn-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.0-1.rhaos4.8.el8
0:5.0.0-1.rhaos4.8.el8
stress-ng
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.12.06-1.el8
0:0.12.06-1.el8
stress-ng-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.12.06-1.el8
0:0.12.06-1.el8
toolbox
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.0.8-3.rhaos4.8.el8
0:0.0.8-3.rhaos4.8.el8
jenkins
Red Hat:openshift:3.11::el7
From an advisory covering 7 CVEs
 before 0:2.289.1.1624365627-1.el7
0:2.289.1.1624365627-1.el7
jenkins-2-plugins
Red Hat:openshift:3.11::el7
From an advisory covering 7 CVEs
 before 0:3.11.1624366838-1.el7
0:3.11.1624366838-1.el7

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-21643 is a medium vulnerability (CVSS 6.5) in Jenkins Config File Provider, published April 21, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.08%, the 65th percentile. Fixed in org.jenkins-ci.plugins:config-file-provider 3.7.1.

References

Show 158 moreShow less
This page doesn't list everything

Left out here: 8 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open