A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dast_api_scanner | Gitlab | 1.6.50 (including) | 2.0.102 (excluding) |
| Gitlab | Ubuntu | esm-apps/xenial | * |
| Gitlab | Ubuntu | trusty | * |
| Gitlab | Ubuntu | xenial | * |