exploitDog

CVE-2019-15741

Опубликовано: 16 сент. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

An issue was discovered in GitLab Omnibus 7.4 through 12.2.1. An unsafe interaction with logrotate could result in a privilege escalation

Ссылки

http://packetstormsecurity.com/files/154734/GitLab-Omnibus-12.2.1-Logrotate-Privilege-Escalation.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2019/Oct/7
Exploit
Mailing List
Third Party Advisory
https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/
Broken Link
Release Notes
https://gitlab.com/gitlab-org/omnibus-gitlab/issues/4380
Exploit
Issue Tracking
Vendor Advisory
http://packetstormsecurity.com/files/154734/GitLab-Omnibus-12.2.1-Logrotate-Privilege-Escalation.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2019/Oct/7
Exploit
Mailing List
Third Party Advisory
https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/
Broken Link
Release Notes
https://gitlab.com/gitlab-org/omnibus-gitlab/issues/4380
Exploit
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:omnibus:*:*:*:*:*:*:*:*

Версия от 7.4.0 (включая) до 12.0.8 (исключая)

cpe:2.3:a:gitlab:omnibus:*:*:*:*:*:*:*:*

Версия от 12.1.0 (включая) до 12.1.8 (исключая)

cpe:2.3:a:gitlab:omnibus:*:*:*:*:*:*:*:*

Версия от 12.2.0 (включая) до 12.2.3 (исключая)

EPSS

Процентиль: 54%

0.00317

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-4g3h-ffrc-5jpv

CVSS3: 9.8

github

больше 3 лет назад

An issue was discovered in GitLab Omnibus 7.4 through 12.2.1. An unsafe interaction with logrotate could result in a privilege escalation

EPSS

Процентиль: 54%

0.00317

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo