CVEvulnerability
CVE-2019-10115
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-05-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-732
Description
An Insecure Permissions issue (issue 2 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The GitLab Releases feature could allow guest users access to private information like release details and code information.
Affected configurations
• gitlab gitlab (< 11.7.8)
• gitlab gitlab (>= 11.8.0 < 11.8.4)
• gitlab gitlab (>= 11.9.0 < 11.9.2)
Related
Weakness · CWE (1)
- CWE-732 Incorrect Permission Assignment for Critical Resource weakness
References
- https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/ Release Notes, Vendor Advisory
- https://about.gitlab.com/blog/categories/releases/ Release Notes, Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab-ce/issues/56402 Exploit, Vendor Advisory
- https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-released/ Release Notes, Vendor Advisory
- https://about.gitlab.com/blog/categories/releases/ Release Notes, Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab-ce/issues/56402 Exploit, Vendor Advisory