CVE-2018-1000111

An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cve@mitre.org

Published

2018-03-13

Last modified

2024-09-16

Weaknesses

CWE-863

Affected products

• Subversion (Jenkins)

References

• https://jenkins.io/security/advisory/2018-02-26/#SECURITY-724