high7.2
CVE-2017-0925
Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resultin…
Impact
Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | from 8.0.0 through 9.5.10 from 10.0.0 through 10.1.5 from 10.2.0 through 10.2.5 from 10.3.0 through 10.3.3 |
| Debian | Debian Linux | Version 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/
- https://gitlab.com/gitlab-org/gitlab-ee/issues/3847
- https://www.debian.org/security/2018/dsa-4145
- https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/
- https://gitlab.com/gitlab-org/gitlab-ee/issues/3847
- https://www.debian.org/security/2018/dsa-4145