PT-2022-13400 · Gitlab · Gitlab
CVE-2022-0738
·
Published
2022-03-28
·
Updated
2024-03-06
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
GitLab versions 14.6 through 14.6.4
GitLab versions 14.7 through 14.7.3
GitLab versions 14.8 through 14.8.1
Description
An issue has been discovered in GitLab where user passwords were leaked when adding mirrors with SSH credentials under specific conditions.
Recommendations
For GitLab versions 14.6 through 14.6.4, update to version 14.6.5 or later.
For GitLab versions 14.7 through 14.7.3, update to version 14.7.4 or later.
For GitLab versions 14.8 through 14.8.1, update to version 14.8.2 or later.
Exploit
Fix
Insufficiently Protected Credentials
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Gitlab