PT-2020-11133
CVE-2019-5462
·
Published
2020-01-28
·
Updated
2020-08-24
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
GitLab CE/EE versions 9.0 and later
Description
A privilege escalation issue was discovered when trigger tokens are not rotated once ownership of them has changed.
Recommendations
For GitLab CE/EE versions 9.0 and later, rotate trigger tokens once ownership of them has changed to prevent privilege escalation.
Found an issue in the description? Have something to add? Feel free to write us 👾