CVE-2018-1000106

2018-03-1313:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

31.3%

JSON

An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to modify the Gerrit configuration in Jenkins.

CPENameOperatorVersion
gerrit-trigger-plugineqgerrit-trigger-2.12.0
gerrit-trigger-plugineqgerrit-trigger-2.12.0-beta-1
gerrit-trigger-plugineqgerrit-trigger-2.15.0-beta-1
gerrit-trigger-plugineqgerrit-trigger-2.13.0-beta-3
gerrit-trigger-plugineqgerrit-trigger-2.14.0-beta-2
gerrit-trigger-plugineqgerrit-trigger-2.15.2
gerrit-trigger-plugineqgerrit-trigger-2.12.0-beta-4
gerrit-trigger-plugineqgerrit-trigger-2.26.0
gerrit-trigger-plugineqgerrit-trigger-2.27.1
gerrit-trigger-plugineqgerrit-trigger-2.4.0

Name	Operator	Version
gerrit-trigger-plugin	eq	gerrit-trigger-2.12.0
gerrit-trigger-plugin	eq	gerrit-trigger-2.12.0-beta-1
gerrit-trigger-plugin	eq	gerrit-trigger-2.15.0-beta-1
gerrit-trigger-plugin	eq	gerrit-trigger-2.13.0-beta-3
gerrit-trigger-plugin	eq	gerrit-trigger-2.14.0-beta-2
gerrit-trigger-plugin	eq	gerrit-trigger-2.15.2
gerrit-trigger-plugin	eq	gerrit-trigger-2.12.0-beta-4
gerrit-trigger-plugin	eq	gerrit-trigger-2.26.0
gerrit-trigger-plugin	eq	gerrit-trigger-2.27.1
gerrit-trigger-plugin	eq	gerrit-trigger-2.4.0

Rows per page:

1-10 of 771

References

jenkins.io/security/advisory/2018-02-26/#SECURITY-403

0.001 Low

EPSS

Percentile

31.3%

JSON

Related for OSV:CVE-2018-1000106