5.5

CVE-2021-39896

In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonating, the admin may be logged in as the second user they impersonated, which may lead to repudiation issues.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gitlab ≫ Gitlab SwEditioncommunity Version >= 8.0.0 < 14.1.7
Gitlab ≫ Gitlab SwEditionenterprise Version >= 8.0.0 < 14.1.7
Gitlab ≫ Gitlab SwEditioncommunity Version >= 14.2 < 14.2.5
Gitlab ≫ Gitlab SwEditionenterprise Version >= 14.2 < 14.2.5
Gitlab ≫ Gitlab SwEditioncommunity Version >= 14.3 < 14.3.1
Gitlab ≫ Gitlab SwEditionenterprise Version >= 14.3 < 14.3.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.419
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 3.8 1.2 2.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
nvd@nist.gov 5.5 8 4.9
AV:N/AC:L/Au:S/C:P/I:P/A:N
cve@gitlab.com 3.8 1.2 2.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N