PT-2019-11577 · Gitlab · Gitlab Ce/Ee+1

Douglas Barbosa Alexandre · Publicado 2019-05-16 · Atualizado 2020-08-24 · CVE-2019-10114

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition versions 11.7.8 and earlier GitLab Community and Enterprise Edition versions 11.8.x before 11.8.4 GitLab Community and Enterprise Edition versions 11.9.x before 11.9.2

Description: An Information Exposure issue was discovered in GitLab during the OAuth authentication process. The application attempts to validate a parameter in an insecure way, potentially exposing data.

Recommendations: For GitLab Community and Enterprise Edition versions 11.7.8 and earlier, update to version 11.7.8 or later. For GitLab Community and Enterprise Edition versions 11.8.x before 11.8.4, update to version 11.8.4 or later. For GitLab Community and Enterprise Edition versions 11.9.x before 11.9.2, update to version 11.9.2 or later.

Exploit

Correção

Side Channel Attack

Enumeração de Fraquezas

CWE-203

Identificadores relacionados

CVE-2019-10114

Produtos afetados

Gitlab

Gitlab Ce/Ee

Referências · 5

• 🔥 https://gitlab.com/gitlab-org/gitlab-ee/issues/9729 · Exploit
• https://about.gitlab.com/blog/categories/releases · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-10114 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-10114 · Nota de Segurança
• https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released · Aviso do Fabricante