CVE-2018-1000112: Medium severity mercurial vulnerability
Published Mar 13, 2018
·Updated
An improper authorization vulnerability exists in Jenkins Mercurial Plugin version 2.2 and earlier in MercurialStatus.java that allows an attacker with network access to obtain a list of nodes and users.
Affected Software
2 affected componentsFixes available
maven/org.jenkins-ci.plugins:mercurial<=2.2
2.3
Jenkins Mercurial Jenkins<=2.2
Event History
Mar 13, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
Description
May 13, 2022
Advisory Published
01:48 AM
Frequently Asked Questions
1
What is the severity of CVE-2018-1000112?
CVE-2018-1000112 is classified as a medium severity vulnerability.
2
How do I fix CVE-2018-1000112?
To fix CVE-2018-1000112, update your Jenkins Mercurial Plugin to version 2.3 or later.
3
What impact does CVE-2018-1000112 have on systems?
CVE-2018-1000112 may allow unauthorized users to access sensitive information such as a list of nodes and users.
4
Which versions of the Jenkins Mercurial Plugin are affected by CVE-2018-1000112?
CVE-2018-1000112 affects Jenkins Mercurial Plugin versions 2.2 and earlier.
5
Is there a workaround for CVE-2018-1000112 if I cannot update?
There is no official workaround for CVE-2018-1000112 other than upgrading to the patched version.