CVE Vulnerabilities

CVE-2020-13327

Published: Oct 22, 2020 | Modified: Nov 02, 2020
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
6 MEDIUM
AV:N/AC:M/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions starting from 13.3.0 before 13.3.7, all versions starting from 13.2.0 before 13.2.10. Insecure Runner Configuration in Kubernetes Environments

Affected Software

Name Vendor Start Version End Version
Runner Gitlab 13.2.0 *
Runner Gitlab 13.3.0 *
Runner Gitlab 13.4.0 *
Gitlab-ci-multi-runner Ubuntu trusty *

References