{"action":"Upgrade com.xebialabs.deployit.ci:deployit-plugin to 10.0.2 or later.","affected":[{"fixed":"10.0.2","introduced":"0"}],"component":"com.xebialabs.deployit.ci:deployit-plugin","cve_ids":["CVE-2021-21662"],"ecosystem":"Maven","epss":0.00949,"exploited":false,"fixed_versions":["10.0.2"],"ghsa_id":"GHSA-h246-g39x-7vmx","id":"tcs_01M5N8ZBAKPJ54NANPRB4FKB1E","modified_at":"2024-02-16T08:11:39.610432Z","published_at":"2022-05-24T22:01:39Z","references":["https://osv.dev/vulnerability/GHSA-h246-g39x-7vmx","https://nvd.nist.gov/vuln/detail/CVE-2021-21662","https://github.com/jenkinsci/xldeploy-plugin/commit/79ae204d2ee6cd94badf4c24a150cee13a3bde44","https://github.com/jenkinsci/xldeploy-plugin","https://www.jenkins.io/security/advisory/2021-06-10/#SECURITY-1981","http://www.openwall.com/lists/oss-security/2021/06/10/14"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-h246-g39x-7vmx","url":"https://osv.dev/vulnerability/GHSA-h246-g39x-7vmx"}],"summary":"Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows enumerating credentials IDs"}