Description
An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker with network access to obtain a list of nodes and users.
Remediation
References
https://jenkins.io/security/advisory/2018-02-26/#SECURITY-723
Related Vulnerabilities
CVE-2020-2119 Vulnerability in maven package org.jenkins-ci.plugins:azure-ad
CVE-2023-28158 Vulnerability in maven package org.apache.archiva:archiva-web-common
CVE-2013-2165 Vulnerability in maven package org.richfaces.core:richfaces-core-impl
CVE-2020-26870 Vulnerability in maven package org.webjars.bowergithub.cure53:dompurify
CVE-2021-32730 Vulnerability in maven package org.xwiki.platform:xwiki-platform-administration-ui