CVE-2019-6797

Опубликовано: 17 мая 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

An information disclosure issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The GitHub token used in CI/CD for External Repos was being leaked to project maintainers in the UI.

Ссылки

https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/
Release Notes
Vendor Advisory
https://about.gitlab.com/blog/categories/releases/
Release Notes
Vendor Advisory
https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/
Release Notes
Vendor Advisory
https://about.gitlab.com/blog/categories/releases/
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Версия до 11.5.8 (исключая)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Версия от 11.6.0 (включая) до 11.6.6 (исключая)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Версия от 11.7.0 (включая) до 11.7.1 (исключая)

EPSS

Процентиль: 33%

0.00127

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2019-6797

CVSS3: 7.5

ubuntu

около 6 лет назад

CVE-2019-6797

CVSS3: 7.5

debian

около 6 лет назад

An information disclosure issue was discovered in GitLab Enterprise Ed ...

GHSA-w2gf-3qqp-3r4x

github

около 3 лет назад

EPSS

Процентиль: 33%

0.00127

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo