Security Advisory

CVE-2018-1000105

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-03-13 13:00:00

Last updated 2024-09-16 20:32:21

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to retrieve some configuration information about Gerrit in Jenkins.

← Browse all CVEs View on cve.org ↗