CVE-2019-16552

Name of the Vulnerable Software and Affected Versions Jenkins Gerrit Trigger Plugin versions 2.30.1 and earlier

Description A missing permission check in the plugin allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials. This also enables them to determine the existence of a file with a given path on the Jenkins master.

Recommendations For versions 2.30.1 and earlier, update to a version that includes the fix for the missing permission check to prevent unauthorized access and file existence disclosure.