cve.bz

CVE-2021-21614

5.5 mediumEPSS 0.3%

Medium (5.5) in jenkins bumblebee hp alm. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.plugins:bumblebee 4.1.6.

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

Severity

CVSS 3.1

5.5 medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE
CWE-522
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-8v72-qr3h-c6rvMavenorg.jenkins-ci.plugins:bumblebee<4.1.64.1.6

References

Check your stackJSON