PT-2021-22721 · Gitlab · Gitlab Ce/Ee+1
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions:
GitLab CE/EE versions 11.0 and later
Description:
The requirement to enforce 2-factor authentication (2FA) is not honored when using git commands in the affected versions.
Recommendations:
For GitLab CE/EE versions 11.0 and later, consider temporarily disabling git command access until a patch is available to enforce 2FA requirements. Restrict access to git commands to minimize the risk of exploitation.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Gitlab
Gitlab Ce/Ee