Vulnerability · Published Dec 10, 2020 · Assigned by Google
CVE-2020-8920Overoptimization leads to private information leak in Gerrit
Low 3.5
In plain English
A low-severity security flaw in Gerrit from Gerrit. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where an overoptimization with the FilteredRepository wrapper skips the verification of access on All-Users repositories, allowing an attacker to get read access to all users' personal information associated with their accounts.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Maven | com.google.gerrit:gerrit-plugin-api | 2.14.22 | GHSA-g5q2-cxgq-h2rw |
| Maven | com.google.gerrit:gerrit-plugin-api | 2.15.21 | GHSA-g5q2-cxgq-h2rw |
| Maven | com.google.gerrit:gerrit-plugin-api | 2.16.25 | GHSA-g5q2-cxgq-h2rw |
| Maven | com.google.gerrit:gerrit-plugin-api | 3.0.15 | GHSA-g5q2-cxgq-h2rw |
| Maven | com.google.gerrit:gerrit-plugin-api | 3.1.10 | GHSA-g5q2-cxgq-h2rw |
| Maven | com.google.gerrit:gerrit-plugin-api | 3.2.5 | GHSA-g5q2-cxgq-h2rw |
Affected products (as reported)
Weakness: CWE-285 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
- https://www.gerritcodereview.com/2.15.html#21521 x_refsource_CONFIRM
- https://www.gerritcodereview.com/2.16.html#21625 x_refsource_CONFIRM
- https://www.gerritcodereview.com/3.0.html#3014 x_refsource_CONFIRM
- https://www.gerritcodereview.com/3.1.html#3110 x_refsource_CONFIRM
- https://www.gerritcodereview.com/3.2.html#325 x_refsource_CONFIRM
- https://gerrit.googlesource.com/gerrit/+/45071d6977932bca5a1427c8abad24710fed2e33 x_refsource_CONFIRM
- https://www.gerritcodereview.com/2.14.html#21422 x_refsource_CONFIRM