PT-2020-9719
CVE-2019-15585
·
تاريخ النشر
2020-01-28
·
تاريخ التحديث
2020-01-29
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
GitLab Community Edition (CE) and Enterprise Edition (EE) versions prior to 12.3.2
GitLab Community Edition (CE) and Enterprise Edition (EE) versions prior to 12.2.6
GitLab Community Edition (CE) and Enterprise Edition (EE) versions prior to 12.1.12
Description
The issue is related to improper authentication in the GitLab SAML integration, which had a validation issue. This permitted an attacker to takeover another user's account.
Recommendations
For versions prior to 12.3.2, update to version 12.3.2 or later to resolve the issue.
For versions prior to 12.2.6, update to version 12.2.6 or later to resolve the issue.
For versions prior to 12.1.12, update to version 12.1.12 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾