CVE-2018-19583
Summary
| CVE | CVE-2018-19583 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-07-10 17:15:00 UTC |
| Updated | 2023-03-01 15:45:00 UTC |
| Description | GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with access to the logs to see another user's token. |
Risk And Classification
Problem Types: CWE-532
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| GitLab Security Release: 11.5.1, 11.4.8, and 11.3.11 | GitLab | CONFIRM | about.gitlab.com | Release Notes, Vendor Advisory |
| Workhorse logs contain access_token (#182) · Issues · GitLab.org / gitlab-workhorse · GitLab | MISC | gitlab.com | Issue Tracking, Vendor Advisory |
| Malformed Request | BID | www.securityfocus.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.