Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-2095HistoryAug 05, 2022 - 4:15 p.m.
CVE-2022-2095
2022-08-0516:15:00
Debian Security Bug Tracker
security-tracker.debian.org
15
0.001 Low
EPSS
Percentile
34.3%
An improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows a malicious authenticated user to view a public project’s Deploy Key’s public fingerprint and name when that key has write permission. Note that GitLab never asks for nor stores the private key.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | gitlab | < 15.10.8+ds1-2 | gitlab_15.10.8+ds1-2_all.deb |
Related
openvas
openvas
osv
osv
CVE-2022-2095
2022-08-05 16:15:11
BIT-gitlab-2022-2095
2024-03-06 11:15:36
cve
cve
CVE-2022-2095
2022-08-05 16:15:00
prion
prion
Improper access control
2022-08-05 16:15:00
ubuntucve
ubuntucve
CVE-2022-2095
2022-08-05 00:00:00
nessus
nessus
GitLab 13.7 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2095)
2022-08-04 00:00:00
veracode
veracode
Improper Authorization
2023-08-06 22:02:30
freebsd
freebsd
Gitlab -- multiple vulnerabilities
2022-07-28 00:00:00