CVE-2018-1000110

An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker with network access to obtain a list of nodes and users...

CVE-2018-1000112: Incorrect Authorization

An improper authorization vulnerability exists in Jenkins Mercurial Plugin version 2.2 and earlier in MercurialStatus.java that allows an attacker with network access to obtain a list of nodes and users...

PT-2018-9289

Name of the Vulnerable Software and Affected Versions: Jenkins Git Plugin versions 3.7.0 and earlier Description: An improper authorization issue exists in the GitStatus.java component, allowing an attacker with network access to obtain a list of nodes and users. Recommendations: For Jenkins Git...