PT-2018-5154
CVE-2017-0927
·
Published
2018-03-21
·
Updated
2019-10-09
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Gitlab Community Edition version 10.3
Description
The issue is related to an improper authorization problem in the deployment keys component. This results in unauthorized use of deployment keys by guest users.
Recommendations
For Gitlab Community Edition version 10.3, update to a version that includes a fix for the improper authorization issue in the deployment keys component to prevent unauthorized use of deployment keys by guest users.
Found an issue in the description? Have something to add? Feel free to write us 👾