CVE-2017-0927: Medium severity gitlab vulnerability
Published Mar 21, 2018
·Updated
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users.
Affected Software
8 affected components
GitLab GitLab>=8.16.0<=9.5.10
GitLab GitLab>=8.16.0<=9.5.10
GitLab GitLab>=10.0.0<=10.1.5
GitLab GitLab>=10.0.0<=10.1.5
GitLab GitLab>=10.2.0<=10.2.5
GitLab GitLab>=10.2.0<=10.2.5
GitLab GitLab>=10.3.0<=10.3.3
GitLab GitLab>=10.3.0<=10.3.3
Event History
Mar 21, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-0927?
CVE-2017-0927 is rated as a medium severity vulnerability due to improper authorization issues.
2
How do I fix CVE-2017-0927?
To fix CVE-2017-0927, upgrade GitLab to version 10.3.4 or later.
3
Who is affected by CVE-2017-0927?
CVE-2017-0927 affects versions of GitLab Community and Enterprise Edition from 8.16.0 to 10.3.3.
4
What type of vulnerability is CVE-2017-0927?
CVE-2017-0927 is an improper authorization vulnerability in the deployment keys component.
5
Can guest users exploit CVE-2017-0927?
Yes, guest users can potentially exploit CVE-2017-0927 to access unauthorized deployment keys.