PT-2018-9285
CVE-2018-1000106
·
تاريخ النشر
2018-03-13
·
تاريخ التحديث
2022-05-13
الوصف من
CVSS 2.0
5.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
Jenkins Gerrit Trigger Plugin versions 2.27.4 and earlier
Description:
An improper authorization issue exists that allows an attacker with Overall/Read access to modify the Gerrit configuration in Jenkins. This issue is related to the
GerritManagement.java, GerritServer.java, and PluginImpl.java files.Recommendations:
For Jenkins Gerrit Trigger Plugin versions 2.27.4 and earlier, consider restricting access to the configuration modification functionality until a fix is available. As a temporary workaround, review and limit the Overall/Read access permissions to prevent unauthorized modifications to the Gerrit configuration.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾