Lucene search
FreeBSDB2CAAE55-DC38-11EE-96DC-001B217B3468HistoryMar 06, 2024 - 12:00 a.m.
Gitlab -- Vulnerabilities
2024-03-0600:00:00
vuxml.freebsd.org
8
gitlab
bypassing approval
stealing variables
guest access tokens
group permissions
unix
7.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
7.3 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.5%
Gitlab reports:
Bypassing CODEOWNERS approval allowing to steal protected variables
Guest with manage group access tokens can rotate and see group access token with owner permissions
Related
nessus
nessus
FreeBSD : Gitlab -- Vulnerabilities (b2caae55-dc38-11ee-96dc-001b217b3468)
2024-03-08 00:00:00
GitLab 16.9 < 16.9.2 / 16.8 < 16.8.4 (CVE-2024-1299)
2024-03-06 00:00:00
GitLab 11.3 < 16.7.7 / 16.8 < 16.8.4 / 16.9 < 16.9.2 (CVE-2024-0199)
2024-03-06 00:00:00
veracode
veracode
Improper Authorization
2024-03-10 09:14:43
Improper Access Control
2024-03-12 04:29:39
prion
prion
Privilege escalation
2024-03-07 01:15:00
Authorization
2024-03-07 01:15:00
debiancve
debiancve
CVE-2024-1299
2024-03-07 01:15:52
CVE-2024-0199
2024-03-07 01:15:52
cve
cve
CVE-2024-1299
2024-03-07 01:15:52
CVE-2024-0199
2024-03-07 01:15:52
nvd
nvd
CVE-2024-1299
2024-03-07 01:15:52
CVE-2024-0199
2024-03-07 01:15:52
ubuntucve
ubuntucve
CVE-2024-1299
2024-03-07 00:00:00
CVE-2024-0199
2024-03-07 00:00:00
osv
osv
BIT-gitlab-2024-1299
2024-03-12 08:24:19
BIT-gitlab-2024-0199
2024-03-12 08:25:54
cvelist
cvelist
CVE-2024-1299 Incorrect Authorization in GitLab
2024-03-07 00:39:45
CVE-2024-0199 Improper Access Control in GitLab
2024-03-07 00:39:50
7.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
7.3 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.5%
Related for B2CAAE55-DC38-11EE-96DC-001B217B3468