Lucene search
GoogleOSV:BIT-GITLAB-2022-3031HistoryMar 06, 2024 - 11:14 a.m.
BIT-gitlab-2022-3031
2024-03-0611:14:38
Google
osv.dev
8
gitlab
security
vulnerability
password guessing
brute force
2fa
endpoint
software
An issue has been discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. It may be possible for an attacker to guess a user’s password by brute force by sending crafted requests to a specific endpoint, even if the victim user has 2FA enabled on their account.
Related
nessus
nessus
GitLab 0.0 < 15.1.6 / 15.2 < 15.2.4 / 15.3 < 15.3.2 (CVE-2022-3031)
2024-01-03 00:00:00
cve
cve
CVE-2022-3031
2022-10-17 16:15:00
veracode
veracode
Information Disclosure
2023-08-06 04:43:10
cvelist
cvelist
CVE-2022-3031
2022-10-17 00:00:00
osv
osv
CVE-2022-3031
2022-10-17 16:15:22
debiancve
debiancve
CVE-2022-3031
2022-10-17 16:15:00
prion
prion
Default credentials
2022-10-17 16:15:00
ubuntucve
ubuntucve
CVE-2022-3031
2022-10-17 00:00:00
freebsd
freebsd
Gitlab -- multiple vulnerabilities
2022-08-30 00:00:00