Lucene search

CVE-2024-4011 Improper Access Control in GitLab

🗓️ 26 Jun 2024 23:20:31Reported by GitLabType

Improper Access Control in GitLab CVE-2024-401

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 11
NVD	CVE-2024-4011	27 Jun 202400:15	–	nvd
CVE	CVE-2024-4011	27 Jun 202400:15	–	cve
OSV	BIT-GITLAB-2024-4011 Improper Access Control in GitLab	28 Jun 202407:22	–	osv
OSV	UBUNTU-CVE-2024-4011	27 Jun 202400:15	–	osv
OSV	CVE-2024-4011	27 Jun 202400:15	–	osv
Tenable Nessus	GitLab 16.1 < 16.11.5 / 17.0 < 17.0.3 / 17.1 < 17.1.1 (CVE-2024-4011)	27 Jun 202400:00	–	nessus
Tenable Nessus	FreeBSD : Gitlab -- Vulnerabilities (589de937-343f-11ef-8a7b-001b217b3468)	27 Jun 202400:00	–	nessus
Vulnrichment	CVE-2024-4011 Improper Access Control in GitLab	26 Jun 202423:31	–	vulnrichment
UbuntuCve	CVE-2024-4011	27 Jun 202400:00	–	ubuntucve
Debian CVE	CVE-2024-4011	27 Jun 202400:15	–	debiancve

[
  {
    "cpes": [
      "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "GitLab",
    "repo": "git://[email protected]:gitlab-org/gitlab.git",
    "vendor": "GitLab",
    "versions": [
      {
        "lessThan": "16.11.5",
        "status": "affected",
        "version": "16.1",
        "versionType": "semver"
      },
      {
        "lessThan": "17.0.3",
        "status": "affected",
        "version": "17.0",
        "versionType": "semver"
      },
      {
        "lessThan": "17.1.1",
        "status": "affected",
        "version": "17.1",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
gitlab	www.gitlab.com/gitlab-org/gitlab/-/issues/457235
hackerone	www.hackerone.com/reports/2456186

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Jun 2024 23:31Current

CVSS33.1

EPSS0.00039

CWE-863