CVE-2019-15741

An issue was discovered in GitLab Omnibus 7.4 through 12.2.1. An unsafe interaction with logrotate could result in a privilege escalation...

GitLab Omnibus 12.2.1 Logrotate Privilege Escalation Vulnerability

Gitlab Omnibus versions 7.4 through 12.2.1 suffer from a privilege escalation vulnerability that leverages a race condition in logrotate, resulting in a root shell. Privilege Escalation via Logrotate in Gitlab Omnibus Overview Target: GitLab Omnibus Vendor: GitLab Version: 7.4 through 12.2.1 Fixe...

GitLab Omnibus 12.2.1 Logrotate Privilege Escalation

Privilege Escalation via Logrotate in Gitlab Omnibus Overview Identifier: AIT-SA-20190930-01 Target: GitLab Omnibus Vendor: GitLab Version: 7.4 through 12.2.1 Fixed in Version: 12.2.3, 12.1.8 and 12.0.8 CVE: CVE-2019-15741 Accessibility: Local Severity: Low Author: Wolfgang Hotwagner AIT Austrian...

CVE-2019-15741

CVE-2019-15741 affects GitLab Omnibus 7.4–12.2.1, where an unsafe interaction with logrotate can enable privilege escalation. The root cause is the log directory ownership being set to user 'git', allowing local users to leverage logrotate rotation to gain elevated privileges. Exploitation detail...

GitLab Omnibus CVE-2019-15741 Privilege Escalation Vulnerability

Description GitLab Omnibus is prone to a remote privilege-escalation vulnerability. A remote attacker can exploit this issue to gain elevated privileges. Versions prior to GitLab 12.2.3, 12.1.8, and 12.0.8 are vulnerable. Technologies Affected Gitlab GitLab 7.4 Gitlab GitLab 7.4.2 Gitlab GitLab...