Lucene search

GoogleCVE-2020-8920

HistoryDec 10, 2020 - 11:15 a.m.

CVE-2020-8920

2020-12-1011:15:11

CWE-285

Google

web.nvd.nist.gov

cve-2020-8920

gerrit

information leak

vulnerability

access verification

all-users repositories

CVSS2

2.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:S/C:P/I:N/A:N

CVSS3

3.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

3.6

Confidence

High

EPSS

0.001

Percentile

27.9%

JSON

An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where an overoptimization with the FilteredRepository wrapper skips the verification of access on All-Users repositories, allowing an attacker to get read access to all users’ personal information associated with their accounts.

Affected configurations

Nvd

Vulners

Node

googlegerritRange2.14.0–2.14.22

googlegerritRange2.15.0–2.15.21

googlegerritRange2.16.0–2.16.25

googlegerritRange3.0.0–3.0.15

googlegerritRange3.1.0–3.1.10

googlegerritRange3.2.0–3.2.5

VendorProductVersionCPE
googlegerrit*cpe:2.3:a:google:gerrit:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	gerrit	*	cpe:2.3:a:google:gerrit::::::::

CNA Affected

[
  {
    "product": "Gerrit",
    "vendor": "Gerrit",
    "versions": [
      {
        "changes": [
          {
            "at": "2.15.21",
            "status": "unaffected"
          },
          {
            "at": "2.16.25",
            "status": "unaffected"
          },
          {
            "at": "3.0.15",
            "status": "unaffected"
          },
          {
            "at": "3.1.10",
            "status": "unaffected"
          },
          {
            "at": "3.2.5",
            "status": "unaffected"
          }
        ],
        "lessThan": "2.14.22",
        "status": "affected",
        "version": "stable",
        "versionType": "custom"
      }
    ]
  }
]

References

gerrit.googlesource.com/gerrit/+/45071d6977932bca5a1427c8abad24710fed2e33

www.gerritcodereview.com/2.14.html#21422

www.gerritcodereview.com/2.15.html#21521

www.gerritcodereview.com/2.16.html#21625

www.gerritcodereview.com/3.0.html#3014

www.gerritcodereview.com/3.1.html#3110

www.gerritcodereview.com/3.2.html#325

CVSS2

2.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:S/C:P/I:N/A:N

CVSS3

3.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

3.6

Confidence

High

EPSS

0.001

Percentile

27.9%

JSON

Related for CVE-2020-8920