Lucene search

K
osvGoogleOSV:CVE-2021-39913
HistoryNov 05, 2021 - 12:15 a.m.

CVE-2021-39913

2021-11-0500:15:11
Google
osv.dev
7
gitlab
system root password
logging
security vulnerability
local file system access

AI Score

6.4

Confidence

Low

EPSS

0

Percentile

5.1%

Accidental logging of system root password in the migration log in all versions of GitLab CE/EE before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows an attacker with local file system access to obtain system root-level privileges

AI Score

6.4

Confidence

Low

EPSS

0

Percentile

5.1%