CVE-2020-8920

CVE-2020-8920 is an information leak vulnerability affecting Google Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, and 3.2.5. This flaw allows an authenticated attacker on the adjacent network to bypass access controls on "All-Users" repositories, gaining unauthorized read access to personal information associated with user accounts. The CVSS score is 3.5 (LOW), indicating a low severity due to the limited impact of information disclosure and the requirement for network adjacency and authentication. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.