CVE Vulnerabilities

CVE-2019-9732

Published: May 29, 2019 | Modified: Aug 24, 2020
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control.

Affected Software

Name Vendor Start Version End Version
Gitlab Gitlab 10.8.0 (including) 10.8.7 (including)
Gitlab Gitlab 11.0.0 (including) 11.6.10 (excluding)
Gitlab Gitlab 11.7.0 (including) 11.7.6 (excluding)
Gitlab Gitlab 11.8.0 (including) 11.8.1 (excluding)

References