PT-2019-9860 · Gitlab · Gitlab Ce/Ee+1

Ngalog

·

CVE-2018-19577

·

Publicado

2019-07-10

·

Atualizado

2023-03-01

CVSS v3.1

5.3

Média

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Gitlab CE/EE versions 8.6 up to 11.3.10 Gitlab CE/EE versions 11.4 up to 11.4.7 Gitlab CE/EE versions 11.5 up to 11.5.0
Description The issue concerns an incorrect access control vulnerability. This vulnerability can display the title and namespace of a confidential issue to an unauthorized user.
Recommendations For Gitlab CE/EE versions 8.6 up to 11.3.10, update to version 11.3.11 or later. For Gitlab CE/EE versions 11.4 up to 11.4.7, update to version 11.4.8 or later. For Gitlab CE/EE versions 11.5 up to 11.5.0, update to version 11.5.1 or later.

Correção

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2018-19577

Produtos afetados

Gitlab
Gitlab Ce/Ee