CVE-2022-1944

🗓️ 06 Jun 2022 16:58:35Reported by GitLabType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 124 Views

Improper authorization in GitLab CE/EE allows users to open terminals on other Developers' running jobs

Reporter	Title	Published	Views	Family All 18
ATTACKERKB	CVE-2022-1944	6 Jun 202217:15	–	attackerkb
Circl	CVE-2022-1944	6 Jun 202220:30	–	circl
CNNVD	GitLab 授权问题漏洞	2 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-1944	6 Jun 202216:58	–	cvelist
Debian CVE	CVE-2022-1944	6 Jun 202216:58	–	debiancve
EUVD	EUVD-2022-25212	3 Oct 202520:07	–	euvd
FreeBSD	Gitlab -- multiple vulnerabilities	1 Jun 202200:00	–	freebsd
Tenable Nessus	FreeBSD : Gitlab -- multiple vulnerabilities (f414d69f-e43d-11ec-9ea4-001b217b3468)	4 Jun 202200:00	–	nessus
Tenable Nessus	GitLab 11.3 < 14.9.5 / 14.10 < 14.10.4 / 15.0 < 15.0.1 (CVE-2022-1944)	28 Jun 202200:00	–	nessus
NCSC	Vulnerabilities fixed in GitLab	3 Jun 202200:00	–	ncsc

NVD

Vulners

Node

gitlab gitlabRange11.3.0–14.9.5community

gitlab gitlabRange11.3.0–14.9.5enterprise

gitlab gitlabRange14.10.0–14.10.4community

gitlab gitlabRange14.10.0–14.10.4enterprise

gitlab gitlabMatch15.0.0community

gitlab gitlabMatch15.0.0enterprise

[
  {
    "product": "GitLab",
    "vendor": "GitLab",
    "versions": [
      {
        "status": "affected",
        "version": ">=11.3, <14.9.5"
      },
      {
        "status": "affected",
        "version": ">=14.10, <14.10.4"
      },
      {
        "status": "affected",
        "version": ">=15.0, <15.0.1"
      }
    ]
  }
]