CVE-2018-1000110

An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker with network access to obtain a list of nodes and users.

Affected products

Jenkins, Jenkins Git Plugin

Jenkins Git

≤ 3.7.0

CVSS 3.0

5.3 MEDIUM

EPSS

3.7% (89th percentile)

Weakness

CWE-863

NVD status

Modified

Published

2018-03-13