CVE-2021-39916
Summary
| CVE | CVE-2021-39916 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-12-13 16:15:00 UTC |
| Updated | 2022-07-12 17:42:00 UTC |
| Description | Lack of an access control check in the External Status Check feature allowed any authenticated user to retrieve the configuration of any External Status Check in GitLab EE starting from 14.1 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. |
Risk And Classification
Problem Types: CWE-639
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Not Found | MISC | gitlab.com | |
| 2021/CVE-2021-39916.json · master · GitLab.org / cves · GitLab | CONFIRM | gitlab.com | |
| HackerOne | MISC | hackerone.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: Thanks @joaxcar for reporting this vulnerability through our HackerOne bug bounty program
Legacy QID Mappings
- 690733 Free Berkeley Software Distribution (FreeBSD) Security Update for gitlab (b299417a-5725-11ec-a587-001b217b3468)