Vulnerability Description
An Insecure Permissions issue (issue 2 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The GitLab Releases feature could allow guest users access to private information like release details and code information.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gitlab | Gitlab | < 11.7.8 |
Related Weaknesses (CWE)
References
- https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-releaRelease NotesVendor Advisory
- https://about.gitlab.com/blog/categories/releases/Release NotesVendor Advisory
- https://gitlab.com/gitlab-org/gitlab-ce/issues/56402ExploitVendor Advisory
- https://about.gitlab.com/2019/04/01/security-release-gitlab-11-dot-9-dot-4-releaRelease NotesVendor Advisory
- https://about.gitlab.com/blog/categories/releases/Release NotesVendor Advisory
- https://gitlab.com/gitlab-org/gitlab-ce/issues/56402ExploitVendor Advisory
FAQ
What is CVE-2019-10115?
CVE-2019-10115 is a vulnerability with a CVSS score of 6.5 (MEDIUM). An Insecure Permissions issue (issue 2 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The GitLab Releases feature could ...
How severe is CVE-2019-10115?
CVE-2019-10115 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-10115?
Check the references section above for vendor advisories and patch information. Affected products include: Gitlab Gitlab.