Lucene search

K
osvGoogleOSV:CVE-2020-13344
HistoryOct 08, 2020 - 2:15 p.m.

CVE-2020-13344

2020-10-0814:15:12
Google
osv.dev
6

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.8%

An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Sessions keys are stored in plain-text in Redis which allows attacker with Redis access to authenticate as any user that has a session stored in Redis

CPENameOperatorVersion
gitlabeq13.4.0-ee
gitlabeq13.4.1-ee

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.8%