Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hw95-w73v-wf42

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

Accidental logging of system root password in the migration log in all versions of GitLab CE/EE allows an attacker with local file system access to obtain system root-level privileges

Accidental logging of system root password in the migration log in all versions of GitLab CE/EE allows an attacker with local file system access to obtain system root-level privileges

EPSS

Процентиль: 19%
0.0006
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 4.4
ubuntu
больше 4 лет назад

Accidental logging of system root password in the migration log in all versions of GitLab CE/EE before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows an attacker with local file system access to obtain system root-level privileges

CVSS3: 4.4
nvd
больше 4 лет назад

Accidental logging of system root password in the migration log in all versions of GitLab CE/EE before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows an attacker with local file system access to obtain system root-level privileges

CVSS3: 4.4
debian
больше 4 лет назад

Accidental logging of system root password in the migration log in all ...

EPSS

Процентиль: 19%
0.0006
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-269