Beveiligingsadvies

CVE-2020-8920

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-12-10 10:15:23

Laatst bijgewerkt 2024-08-04 10:12:10

Toegewezen door Google

CVSS-score 3.5

Status PUBLISHED

Beschrijving

An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where an overoptimization with the FilteredRepository wrapper skips the verification of access on All-Users repositories, allowing an attacker to get read access to all users' personal information associated with their accounts.

← Alle CVE's bekijken Bekijk op cve.org ↗