CVE-2017-1000106

Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches containing a Jenkinsfile, and create corresponding pipelines in Jenkins. Its SCM content REST API supports the pipeline creation and editing feature in Blue...

CVE-2018-1000106

An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to modify the Gerrit configuration in Jenkins...

CVE-2018-1000106

CVE-2018-1000106: Affected software is Jenkins Gerrit Trigger Plugin (≤ version 2.27.4). The root cause is an improper authorization flaw in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to modify Jenkins Gerrit configuration. Docum...

CVE-2018-1000106

An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to modify the Gerrit configuration in Jenkins...

CVE-2016-1000106

CVE-2016-1000106 is a duplicate of CVE-2016-5388; the connected records confirm CVE-2016-5388 is the httpoxy proxy-injection issue in Apache Tomcat CGI handling. Affected Tomcat versions require upgrading: Tomcat 6.x to at least 6.0.47, Tomcat 7.x to at least 7.0.72, and Tomcat 8.x to at least 8....