CVE-2018-1000105: Jenkins Gerrit Trigger

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to retrieve some configuration information about Gerrit in Jenkins.

Affected products

• Jenkins Gerrit Trigger: up to and including 2.27.4

Published 2018-03-13. Last modified 2026-06-17.