Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-2303HistoryAug 05, 2022 - 4:15 p.m.
CVE-2022-2303
2022-08-0516:15:00
Debian Security Bug Tracker
security-tracker.debian.org
13
0.001 Low
EPSS
Percentile
34.6%
An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible for group members to bypass 2FA enforcement enabled at the group level by using Resource Owner Password Credentials grant to obtain an access token without using 2FA.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | gitlab | < 15.10.8+ds1-2 | gitlab_15.10.8+ds1-2_all.deb |
Related
cve
cve
CVE-2022-2303
2022-08-05 16:15:00
ubuntucve
ubuntucve
CVE-2022-2303
2022-08-05 00:00:00
osv
osv
BIT-gitlab-2022-2303
2024-03-06 11:15:20
CVE-2022-2303
2022-08-05 16:15:11
prion
prion
Out-of-bounds
2022-08-05 16:15:00
nessus
nessus
GitLab 0.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2303)
2022-08-05 00:00:00
veracode
veracode
Incorrect Authorization
2023-08-06 23:37:06
openvas
openvas
GitLab <= 15.0.4, 15.1.x - 15.1.3, 15.2 Multiple Vulnerabilities
2022-08-08 00:00:00
freebsd
freebsd
Gitlab -- multiple vulnerabilities
2022-07-28 00:00:00