CVEvulnerability
CVE-2018-19577
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-07-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-284
Description
Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulnerability that displays to an unauthorized user the title and namespace of a confidential issue.
Affected configurations
• gitlab gitlab (>= 8.6.0 < 11.3.11)
• gitlab gitlab (>= 11.4.0 < 11.4.8)
• gitlab gitlab (>= 11.5.0 < 11.5.1)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://www.securityfocus.com/bid/109179 Broken Link, Third Party Advisory, VDB Entry
- https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/ Broken Link, Release Notes, Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab-ce/issues/52444 Issue Tracking, Vendor Advisory
- http://www.securityfocus.com/bid/109179 Broken Link, Third Party Advisory, VDB Entry
- https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/ Broken Link, Release Notes, Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab-ce/issues/52444 Issue Tracking, Vendor Advisory