PT-2019-14351 · Gitlab · Gitlab Ce/Ee+1

Xanbanx · Publicado 2019-09-17 · Atualizado 2021-07-21 · CVE-2019-15729

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 8.18 through 12.2.1

Description An issue was discovered that unintentionally disclosed information about the last pipeline that ran for a merge request due to an internal endpoint.

Recommendations For versions 8.18 through 12.2.1, update to a version that contains a fix for this issue to prevent unintended disclosure of pipeline information.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2019-15729

Produtos afetados

Gitlab

Gitlab Ce/Ee

Referências · 6

• https://gitlab.com/gitlab-org/gitlab-ce/issues/62073 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-15729 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-15729 · Aviso do Fabricante
• https://about.gitlab.com/releases/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released · Nota
• https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15729 · Nota