Lucene search

Ubuntu.comUB:CVE-2019-14942

HistoryApr 16, 2023 - 12:00 a.m.

CVE-2019-14942

2023-04-1600:00:00

ubuntu.com

gitlab

http

security

vulnerability

version 11.11.8

version 12.0.6

version 12.1.6

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

54.0%

JSON

An issue was discovered in GitLab Community and Enterprise Edition before
11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. Cookies for GitLab Pages
(which have access control) could be sent over cleartext HTTP.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=934708>

Notes

Author	Note
msalvatore	Affects GitLab CE/EE 11.5 and later.

References

about.gitlab.com/2019/08/12/critical-security-release-gitlab-12-dot-1-dot-6-released/

launchpad.net/bugs/cve/CVE-2019-14942

nvd.nist.gov/vuln/detail/CVE-2019-14942

security-tracker.debian.org/tracker/CVE-2019-14942

www.cve.org/CVERecord?id=CVE-2019-14942

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

54.0%

JSON

Related for UB:CVE-2019-14942