CVE-2019-6995
Summary
| CVE | CVE-2019-6995 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-09-09 20:15:00 UTC |
| Updated | 2019-09-10 18:44:00 UTC |
| Description | An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. Users are able to comment on locked project issues. |
Risk And Classification
Problem Types: CWE-281
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Gitlab | Gitlab | All | All | All | All |
| Application | Gitlab | Gitlab | All | All | All | All |
| Application | Gitlab | Gitlab | All | All | All | All |
| Application | Gitlab | Gitlab | All | All | All | All |
| Application | Gitlab | Gitlab | All | All | All | All |
| Application | Gitlab | Gitlab | All | All | All | All |
| Application | Gitlab | Gitlab | All | All | All | All |
| Application | Gitlab | Gitlab | All | All | All | All |
| Application | Gitlab | Gitlab | All | All | All | All |
| Application | Gitlab | Gitlab | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| GitLab Security Release: 11.7.3, 11.6.8, 11.5.10 | GitLab | CONFIRM | about.gitlab.com | Release Notes, Vendor Advisory |
| User can comment on locked project issues (#55537) · Issues · GitLab.org / GitLab FOSS · GitLab | CONFIRM | gitlab.com | Exploit, Issue Tracking, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.