CVE:CVE-2021-21636
CNNVD:CNNVD-202103-1667
Jenkins Team Foundation Server是Jenkins开源的一个应用软件。提供了通过与管道兼容的步骤可用的功能。
Jenkins Team Foundation Server Plugin 5.157.1 and earlier 存在安全漏洞，该漏洞源于权限检查缺失，允许攻击者枚举存储在Jenkins中的凭证ID。
solution:Upgrade jenkins team_foundation_server to a higher version than 5.157.1,and avoid the version (,5.157.1]