Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-3286
HistoryOct 17, 2022 - 12:00 a.m.

CVE-2022-3286

2022-10-1700:00:00
ubuntu.com
ubuntu.com
10
cve-2022-3286
gitlab
ip restrictions

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

0.001 Low

EPSS

Percentile

38.2%

Lack of IP address checking in GitLab EE affecting all versions from 14.2
prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a
group member to bypass IP restrictions when using a deploy token

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchgitlab< anyUNKNOWN

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

0.001 Low

EPSS

Percentile

38.2%