Authorization

2018-03-1313:29:00

PRIOn knowledge base

www.prio-n.com

4.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

JSON

An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to retrieve some configuration information about Gerrit in Jenkins.

CPENameOperatorVersion
gerrit_triggerle2.27.4

CPE	Name	Operator	Version
	gerrit_trigger	le	2.27.4

References

jenkins.io/security/advisory/2018-02-26/