CVE-2019-15727
Summary
| CVE | CVE-2019-15727 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-09-16 17:15:00 UTC |
| Updated | 2019-09-18 14:03:00 UTC |
| Description | An issue was discovered in GitLab Community and Enterprise Edition 11.2 through 12.2.1. Insufficient permission checks were being applied when displaying CI results, potentially exposing some CI metrics data to unauthorized users. |
Risk And Classification
Problem Types: CWE-200
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| GitLab Security Release: 12.2.3, 12.1.8, and 12.0.8 | GitLab | CONFIRM | about.gitlab.com | Release Notes, Vendor Advisory |
| CI metrics for MRs are accessible for users without CI access (#11426) · Issues · GitLab.org / GitLab · GitLab | MISC | gitlab.com | Broken Link |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.