5.3

CVE-2018-19577

Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulnerability that displays to an unauthorized user the title and namespace of a confidential issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gitlab ≫ GitLab SwEditioncommunity Version >= 8.6.0 < 11.3.11
Gitlab ≫ GitLab SwEditionenterprise Version >= 8.6.0 < 11.3.11
Gitlab ≫ GitLab SwEditioncommunity Version >= 11.4.0 < 11.4.8
Gitlab ≫ GitLab SwEditionenterprise Version >= 11.4.0 < 11.4.8
Gitlab ≫ GitLab SwEditioncommunity Version >= 11.5.0 < 11.5.1
Gitlab ≫ GitLab SwEditionenterprise Version >= 11.5.0 < 11.5.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.15% 0.797
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/
Vendor Advisory
Broken Link
Release Notes
http://www.securityfocus.com/bid/109179
Third Party Advisory
Broken Link
VDB Entry
https://gitlab.com/gitlab-org/gitlab-ce/issues/52444
Vendor Advisory
Issue Tracking