alpine · CVE-2018-1000110

Quick triage

Priority: medium Published: Updated:

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2018-1000110: 1 source package rows (jenkins); 37 state rows across 7 repos (3.17-community, 3.18-community, 3.19-community, 3.20-community, 3.22-community, 3.23-community, edge-community); fixed 0, open 37.

Description:

An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker with network access to obtain a list of nodes and users.

cvelogic Threat Intelligence