Beveiligingsadvies

CVE-2018-20500

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-05-17 15:18:18

Laatst bijgewerkt 2024-08-05 12:05:16

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

An insecure permissions issue was discovered in GitLab Community and Enterprise Edition 9.4 and later but before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. The runner registration token in the CI/CD settings could not be reset. This was a security risk if one of the maintainers leaves the group and they know the token.

← Alle CVE's bekijken Bekijk op cve.org ↗