CVE-2019-6790
Summary
| CVE | CVE-2019-6790 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-05-17 16:29:00 UTC |
| Updated | 2020-08-24 17:37:00 UTC |
| Description | An Incorrect Access Control (issue 2 of 3) issue was discovered in GitLab Community and Enterprise Edition 8.14 and later but before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. Guest users were able to view the list of a group's merge requests. |
Risk And Classification
Problem Types: CWE-862
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Guests can see list of merge requests (#51328) · Issues · GitLab.org / GitLab FOSS · GitLab | CONFIRM | gitlab.com | |
| GitLab Security Release: 11.7.3, 11.6.8, 11.5.10 | GitLab | MISC | about.gitlab.com | Release Notes, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.