onyx --cves cve-2021-21661

CVE-2021-21661

score: <0.1
cvss: 4.3
epss: 1.6%
published: 2021-06-10
kev added: —
first seen: 2026-10-21

Jenkins Kubernetes CLI Plugin 1.10.0 and earlier contains a permission check bypass caused by missing permission validation in HTTP endpoints, letting attackers with Overall/Read permission enumerate credentials IDs, exploit requires attacker to have Overall/Read permission.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2021-06-10 Published
2026-10-21 Tracked by Onyx

References 2

https://www.jenkins.io/security/advisory/2021-06-10/#SECURITY-2370
http://www.openwall.com/lists/oss-security/2021/06/10/14