Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gc5m-gc6j-fr9q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Sessions keys are stored in plain-text in Redis which allows attacker with Redis access to authenticate as any user that has a session stored in Redis

An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Sessions keys are stored in plain-text in Redis which allows attacker with Redis access to authenticate as any user that has a session stored in Redis

EPSS

Процентиль: 23%
0.00077
Низкий

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.7
ubuntu
больше 5 лет назад

An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Sessions keys are stored in plain-text in Redis which allows attacker with Redis access to authenticate as any user that has a session stored in Redis

CVSS3: 5.7
nvd
больше 5 лет назад

An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Sessions keys are stored in plain-text in Redis which allows attacker with Redis access to authenticate as any user that has a session stored in Redis

CVSS3: 5.7
debian
больше 5 лет назад

An issue has been discovered in GitLab affecting all versions prior to ...

EPSS

Процентиль: 23%
0.00077
Низкий

Дефекты

CWE-200