Beveiligingsadvies

CVE-2019-6996

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-09-09 19:56:09

Laatst bijgewerkt 2024-08-04 20:38:32

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

An issue was discovered in GitLab Enterprise Edition 10.x (starting in 10.6) and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. The merge request approvers section has an access control issue that permits project maintainers to view membership of private groups.

← Alle CVE's bekijken Bekijk op cve.org ↗