Security Advisory

CVE-2021-39891

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-10-05 13:38:07

Last updated 2024-08-04 02:20:33

Assigner GitLab

CVSS score 5.9

State PUBLISHED

Description

In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are not cleared at the end of impersonation which may lead to unnecessary sensitive info disclosure.

← Browse all CVEs View on cve.org ↗