Логотип exploitDog
bind:CVE-2019-12825
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2019-12825

Количество 4

Количество 4

ubuntu логотип

CVE-2019-12825

больше 5 лет назад

Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre. In other words, authenticated remote attackers can read Docker registries of other groups. When a legitimate user changes the path of a group, Docker registries are not adapted, leaving them in the old namespace. They are not protected and are available to all other users with no previous access to the repo.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2019-12825

больше 5 лет назад

Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre. In other words, authenticated remote attackers can read Docker registries of other groups. When a legitimate user changes the path of a group, Docker registries are not adapted, leaving them in the old namespace. They are not protected and are available to all other users with no previous access to the repo.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2019-12825

больше 5 лет назад

Unauthorized Access to the Container Registry of other groups was disc ...

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-9423-j6rv-rhp5

около 3 лет назад

Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre. In other words, authenticated remote attackers can read Docker registries of other groups. When a legitimate user changes the path of a group, Docker registries are not adapted, leaving them in the old namespace. They are not protected and are available to all other users with no previous access to the repo.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2019-12825

Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre. In other words, authenticated remote attackers can read Docker registries of other groups. When a legitimate user changes the path of a group, Docker registries are not adapted, leaving them in the old namespace. They are not protected and are available to all other users with no previous access to the repo.

CVSS3: 4.3
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2019-12825

Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre. In other words, authenticated remote attackers can read Docker registries of other groups. When a legitimate user changes the path of a group, Docker registries are not adapted, leaving them in the old namespace. They are not protected and are available to all other users with no previous access to the repo.

CVSS3: 4.3
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2019-12825

Unauthorized Access to the Container Registry of other groups was disc ...

CVSS3: 4.3
0%
Низкий
больше 5 лет назад
github логотип
GHSA-9423-j6rv-rhp5

Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre. In other words, authenticated remote attackers can read Docker registries of other groups. When a legitimate user changes the path of a group, Docker registries are not adapted, leaving them in the old namespace. They are not protected and are available to all other users with no previous access to the repo.

0%
Низкий
около 3 лет назад

Уязвимостей на страницу