Executive Summary

Informations
NameCVE-2019-10108First vendor Publication2019-05-15
VendorCveLast vendor Modification2019-05-16

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:S/C:P/I:P/A:N)
Cvss Base Score5.5Attack RangeNetwork
Cvss Impact Score4.9Attack ComplexityLow
Cvss Expoit Score8AuthenticationRequires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

An Incorrect Access Control (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. It allowed non-members of a private project/group to add and read labels.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10108

CWE : Common Weakness Enumeration

%idName
100 %CWE-284Access Control (Authorization) Issues

CPE : Common Platform Enumeration

TypeDescriptionCount
Application1426

Sources (Detail)

SourceUrl
MISC https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-re...
https://about.gitlab.com/blog/categories/releases/
https://gitlab.com/gitlab-org/gitlab-ce/issues/56985

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
DateInformations
2019-10-04 12:10:49
  • Multiple Updates
2019-09-26 12:10:56
  • Multiple Updates
2019-06-04 12:09:37
  • Multiple Updates
2019-05-30 12:09:42
  • Multiple Updates
2019-05-16 21:19:31
  • Multiple Updates
2019-05-16 05:18:49
  • First insertion