CVE-2019-11549
Summary
| CVE | CVE-2019-11549 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-09-09 19:15:00 UTC |
| Updated | 2020-08-24 17:37:00 UTC |
| Description | An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. Gitaly has allows an information disclosure issue where HTTP/GIT credentials are included in logs on connection errors. |
Risk And Classification
Problem Types: CWE-532
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Gitlab | Gitlab | All | All | All | All |
| Application | Gitlab | Gitlab | All | All | All | All |
| Application | Gitlab | Gitlab | All | All | All | All |
| Application | Gitlab | Gitlab | All | All | All | All |
| Application | Gitlab | Gitlab | All | All | All | All |
| Application | Gitlab | Gitlab | All | All | All | All |
| Application | Gitlab | Gitlab | All | All | All | All |
| Application | Gitlab | Gitlab | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| GitLab Security Release: 11.10.2, 11.9.10, and 11.8.9 | GitLab | CONFIRM | about.gitlab.com | Release Notes, Vendor Advisory |
| Failed mirror password leak in production.log and web GUI (#57779) · Issues · GitLab.org / GitLab FOSS · GitLab | CONFIRM | gitlab.com | Exploit, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.