Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-3932
HistoryAug 03, 2023 - 5:15 a.m.

CVE-2023-3932

2023-08-0305:15:10
CWE-862
[email protected]
web.nvd.nist.gov
7
gitlab
security issue
unauthorized access
pipeline jobs

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

8

Confidence

High

EPSS

0.001

Percentile

40.0%

JSON

An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies.

Affected configurations

Nvd
Node
gitlabgitlabRange13.12.0–16.0.8enterprise
OR
gitlabgitlabRange16.1.0–16.1.3enterprise
OR
gitlabgitlabRange16.2.0–16.2.2enterprise
VendorProductVersionCPE
gitlabgitlab*cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Related

osv 4
cve 2
prion 2
vulnrichment 1
cvelist 2
redhatcve 1
debiancve 2
nessus 4
nvd 1
hivepro 1
thn 1
osv
osv
BIT-gitlab-2023-3932
2024-03-06 11:01:54
CVE-2023-3932
2023-08-03 05:15:10
CVE-2023-5009
2023-09-19 08:16:07
cve
cve
CVE-2023-3932
2023-08-03 05:15:10
CVE-2023-5009
2023-09-19 08:16:07
prion
prion
Design/Logic Flaw
2023-08-03 05:15:00
Design/Logic Flaw
2023-09-19 08:16:00
vulnrichment
vulnrichment
CVE-2023-3932 Missing Authorization in GitLab
2023-08-03 04:01:58
cvelist
cvelist
CVE-2023-3932 Missing Authorization in GitLab
2023-08-03 04:01:58
CVE-2023-5009 Improper Access Control in GitLab
2023-09-19 07:01:14
redhatcve
redhatcve
CVE-2023-3932
2023-10-09 17:57:15
debiancve
debiancve
CVE-2023-3932
2023-08-03 05:15:10
CVE-2023-5009
2023-09-19 08:16:07
nessus
nessus
GitLab 13.12 < 16.0.8 / 16.1.0 < 16.1.3 / 16.2.0 < 16.2.2 (CVE-2023-3932)
2024-01-02 00:00:00
GitLab 13.12 < 16.2.7 / 16.3 < 16.3.4 (CVE-2023-5009)
2023-09-19 00:00:00
FreeBSD : Gitlab -- vulnerability (32a4896a-56da-11ee-9186-001b217b3468)
2023-09-19 00:00:00
nvd
nvd
CVE-2023-5009
2023-09-19 08:16:07
hivepro
hivepro
GitLab Releases Critical Patch to Address Pipeline Execution Vulnerability
2023-09-22 05:19:08
thn
thn
GitLab Releases Urgent Security Patches for Critical Vulnerability
2023-09-20 07:18:00

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

8

Confidence

High

EPSS

0.001

Percentile

40.0%

JSON
Related for NVD:CVE-2023-3932
osv4cve2prion2vulnrichment1cvelist2redhatcve1debiancve2nessus4nvd1hivepro1thn1