Описание
An improper authorization vulnerability exists in Jenkins Mercurial Plugin version 2.2 and earlier in MercurialStatus.java that allows an attacker with network access to obtain a list of nodes and users.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenShift Enterprise 3 | jenkins-plugin-mercurial | Affected |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-200
https://bugzilla.redhat.com/show_bug.cgi?id=1549540jenkins-plugin-mercurial: Disclosure of user names and node names to unauthorized users through post-commit hook URL in Mercurial Plugin (SECURITY-726)
EPSS
Процентиль: 60%
0.0098
Низкий
5.3 Medium
CVSS3
Связанные уязвимости
CVSS3: 5.3
nvd
больше 8 лет назад
An improper authorization vulnerability exists in Jenkins Mercurial Plugin version 2.2 and earlier in MercurialStatus.java that allows an attacker with network access to obtain a list of nodes and users.
CVSS3: 5.3
github
больше 4 лет назад
Incorrect Authorization in Jenkins Mercurial Plugin
EPSS
Процентиль: 60%
0.0098
Низкий
5.3 Medium
CVSS3