CVE-2018-1000105 - An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to retrieve some configuration information about Gerrit in Jenkins

Back Back to CVE browser

MEDIUM

An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to retrieve some configuration information about Gerrit in Jenkins

Published Mar 13, 2018

4.3

MEDIUM

CVSS 3.0

EPSS 0.66%

Description

An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to retrieve some configuration information about Gerrit in Jenkins.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-863

Incorrect Authorization

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5632
Advisory
https://github.com/advisories/GHSA-wrqc-q8p5-76m5
Advisory
https://github.com/jenkinsci/gerrit-trigger-plugin/commit/a222f2d9d1bca3422e6a462a7f587ae325455b80
https://jenkins.io/security/advisory/2018-02-26/#SECURITY-402
x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1000105

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5632		Advisory
https://github.com/advisories/GHSA-wrqc-q8p5-76m5		Advisory
https://github.com/jenkinsci/gerrit-trigger-plugin/commit/a222f2d9d1bca3422e6a462a7f587ae325455b80
https://jenkins.io/security/advisory/2018-02-26/#SECURITY-402		x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1000105