CVE-2019-12428: Critical severity gitlab vulnerability
Published Mar 10, 2020
·Updated
An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11. Users could bypass the mandatory external authentication provider sign-in restrictions by sending a specially crafted request. It has Improper Authorization.
Affected Software
2 affected components
GitLab GitLab>=6.8.0<=11.11.0
GitLab GitLab>=6.8.0<=11.11.0
Event History
Mar 10, 2020
CVE Published
via MITRE·01:08 PM
Data Sourced
via MITRE·01:08 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-12428?
CVE-2019-12428 is considered a high-severity vulnerability due to its potential to allow unauthorized access.
2
How do I fix CVE-2019-12428?
To fix CVE-2019-12428, upgrade GitLab Community or Enterprise Edition to version 11.11.1 or later.
3
What type of vulnerability is CVE-2019-12428?
CVE-2019-12428 is classified as an Improper Authorization vulnerability.
4
Which versions of GitLab are affected by CVE-2019-12428?
CVE-2019-12428 affects GitLab Community and Enterprise Editions from versions 6.8 to 11.11.0.
5
Can CVE-2019-12428 be exploited remotely?
Yes, CVE-2019-12428 can be exploited remotely by an attacker sending a specially crafted request.