CVE-2018-1000110

2018-03-1313:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

31.3%

JSON

An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker with network access to obtain a list of nodes and users.

CPENameOperatorVersion
git-plugineqgit-1.1.12
git-plugineqgit-1.1.8
git-plugineqgit-1.1.2
git-plugineqgit-2.5.3
git-plugineqgit-1.3.0
git-plugineqgit-2.0.3
git-plugineqgit-2.5.0-beta4
git-plugineqgit-2.0-beta-3
git-plugineqgit-2.0.1
git-plugineqgit-2.0.2

Name	Operator	Version
git-plugin	eq	git-1.1.12
git-plugin	eq	git-1.1.8
git-plugin	eq	git-1.1.2
git-plugin	eq	git-2.5.3
git-plugin	eq	git-1.3.0
git-plugin	eq	git-2.0.3
git-plugin	eq	git-2.5.0-beta4
git-plugin	eq	git-2.0-beta-3
git-plugin	eq	git-2.0.1
git-plugin	eq	git-2.0.2