CVE Vulnerabilities

CVE-2020-13327

Published: Oct 22, 2020 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
6 MEDIUM
AV:N/AC:M/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions starting from 13.3.0 before 13.3.7, all versions starting from 13.2.0 before 13.2.10. Insecure Runner Configuration in Kubernetes Environments

Affected Software

NameVendorStart VersionEnd Version
RunnerGitlab13.2.0 (including)13.2.10 (excluding)
RunnerGitlab13.3.0 (including)13.3.7 (excluding)
RunnerGitlab13.4.0 (including)13.4.2 (excluding)
Gitlab-ci-multi-runnerUbuntubionic*
Gitlab-ci-multi-runnerUbuntufocal*
Gitlab-ci-multi-runnerUbuntutrusty*

References