CVE-2018-1000105

An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to retrieve some configuration information about Gerrit in Jenkins...

org.jenkins-ci.plugins:gerrit-verify-status-reporter (>=0.0.2, <=0.0.3), org.jenkins-ci.plugins:msginject (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2018-1000105 via com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.14.0, <=2.22.0)

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger MAVEN version =2.14.0, =0.0.2, =0.1.0, =1.0, =2.4.6 Source cves: CVE-2018-1000105 Source advisory: GHSA-WRQC-Q8P5-76M5...

org.jenkins-ci.plugins:gerrit-verify-status-reporter (>=0.0.2, <=0.0.3), org.jenkins-ci.plugins:msginject (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2018-1000105 via com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.14.0, <=2.22.0)

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger MAVEN version =2.14.0, =0.0.2, =0.1.0, =1.0, =2.4.6 Source cves: CVE-2018-1000105 Source advisory: OSV:GHSA-WRQC-Q8P5-76M5...

CVE-2018-1000105

An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to retrieve some configuration information about Gerrit in Jenkins...

CVE-2018-1000105

The CVE-2018-1000105 entry corresponds to an information-disclosure flaw in the Jenkins Gerrit Trigger Plugin (versions 2.27.4 and earlier). The root cause is improper authorization in GerritManagement.java, GerritServer.java, and PluginImpl.java, allowing an attacker with Overall/Read access to ...

org.jenkins-ci.plugins:gerrit-verify-status-reporter (>=0.0.2, <=0.0.3), org.jenkins-ci.plugins:msginject (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2018-1000105 via com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.14.0, <=2.22.0)

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger MAVEN version =2.14.0, =0.0.2, =0.1.0, =1.0, =2.4.6 Source cves: CVE-2018-1000105 Source advisory: MEND:CVE-2018-1000105...