~ / search / GHSA-wrqc-q8p5-76m5

GHSA-wrqc-q8p5-76m5

Incorrect Authorization in Jenkins Gerrit Trigger Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-1000105

Packages

EcosystemPackageAffectedFixed in
Maven com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger < 2.27.5 2.27.5

Details

As written in the advisory (Markdown source, shown as plain text).

An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to retrieve some configuration information about Gerrit in Jenkins.

References

External links from the advisory. They lead to third-party sites.