Lucene search

K
cve[email protected]CVE-2020-8113
HistoryMar 06, 2020 - 6:15 p.m.

CVE-2020-8113

2020-03-0618:15:11
CWE-269
web.nvd.nist.gov
80
gitlab
access control
security
vulnerability
cve-2020-8113
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.3%

GitLab 10.7 and later through 12.7.2 has Incorrect Access Control.

Affected configurations

NVD
Node
gitlabgitlabRange10.7.012.6.8community
OR
gitlabgitlabRange10.7.012.6.8enterprise
OR
gitlabgitlabRange12.7.012.7.2community
OR
gitlabgitlabRange12.7.012.7.2enterprise

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.3%