Lucene search
GoogleOSV:BIT-GITLAB-2022-2095HistoryMar 06, 2024 - 11:15 a.m.
BIT-gitlab-2022-2095
2024-03-0611:15:36
Google
osv.dev
7
gitlab
access control
security vulnerability
public project
deploy key
An improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows a malicious authenticated user to view a public project’s Deploy Key’s public fingerprint and name when that key has write permission. Note that GitLab never asks for nor stores the private key.
Related
openvas
openvas
osv
osv
CVE-2022-2095
2022-08-05 16:15:11
debiancve
debiancve
CVE-2022-2095
2022-08-05 16:15:00
cve
cve
CVE-2022-2095
2022-08-05 16:15:00
prion
prion
Improper access control
2022-08-05 16:15:00
ubuntucve
ubuntucve
CVE-2022-2095
2022-08-05 00:00:00
nessus
nessus
GitLab 13.7 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2095)
2022-08-04 00:00:00
veracode
veracode
Improper Authorization
2023-08-06 22:02:30
freebsd
freebsd
Gitlab -- multiple vulnerabilities
2022-07-28 00:00:00