CVE-2018-1000106

—

CVSS 3.0

5.4 medium

EPSS

<1%p57

Published

Mar 13, 2018 (Mar 13, 2018)

Modified

Jun 17, 2026

Description

An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to modify the Gerrit configuration in Jenkins.

Vendors: jenkins
Products: gerrit trigger
Weakness: CWE-863
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.