Missing Authorization Vulnerability in Micro Focus Application Automation Tools Plugin for Jenkins
CVE-2021-22513

6.5MEDIUM

Key Information:

Vendor

Microfocus
Status
Micro Focus Application Automation Tools Plugin - Jenkins Plugin.
Vendor
CVE Published:
8 April 2021

What is CVE-2021-22513?

A missing authorization issue exists in the Micro Focus Application Automation Tools Plugin for Jenkins, affecting versions 6.7 and earlier. This vulnerability could potentially allow unauthorized access, enabling users to interact with the system without appropriate permission checks in place. It is crucial for users of the affected plugin to apply updates and implement security measures to mitigate potential risks.

Affected Version(s)

Micro Focus Application Automation Tools Plugin - Jenkins plugin. 6.7 and earlier versions

References

https://www.jenkins.io/security/advisory/2021-04-07/#SECU...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.