CVE-2021-22513

MEDIUM

Micro Focus Application Automation Tools < 6.7 - Missing Authorization

Title source: llm

Description

Missing Authorization vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow access without permission checks.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2132

Scores

CVSS v3 6.5

EPSS 0.0014

EPSS Percentile 33.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Details

CWE

CWE-862

Status published

Products (2)

microfocus/application_automation_tools < 6.7

org.jenkins-ci.plugins/hp-application-automation-tools-plugin 0 - 7.2.3-betaMaven

Published Apr 08, 2021

Tracked Since Feb 18, 2026