PT-2020-13468 · Gitlab · Gitlab Runner+1

Joshua Lambert · Published 2020-10-22 · Updated 2024-03-06 · CVE-2020-13327

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GitLab Runner versions 13.2.0 through 13.2.9 GitLab Runner versions 13.3.0 through 13.3.6 GitLab Runner versions 13.4.0 through 13.4.1

Description An issue has been discovered in GitLab Runner related to Insecure Runner Configuration in Kubernetes Environments.

Recommendations For GitLab Runner versions 13.2.0 through 13.2.9, update to version 13.2.10 or later. For GitLab Runner versions 13.3.0 through 13.3.6, update to version 13.3.7 or later. For GitLab Runner versions 13.4.0 through 13.4.1, update to version 13.4.2 or later.

Fix

Related Identifiers

BIT-GITLAB-RUNNER-2020-13327

CVE-2020-13327

Affected Products

Gitlab

Gitlab Runner

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2020-13327 · Security Note
• https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13327.json · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-13327 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-13327 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-gitlab-runner-2020-13327 · Vendor Advisory
• https://gitlab.com/gitlab-org/gitlab-runner/-/issues/26833 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-13327 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-13327 · Security Note