CVE-2019-15579: Infoleak
Published Jan 28, 2020
·Updated
An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) where the assignee(s) of a confidential issue in a private project would be disclosed to a guest via milestones.
Affected Software
6 affected components
GitLab GitLab>=12.1.0<12.1.12
GitLab GitLab>=12.1.0<12.1.12
GitLab GitLab>=12.2.0<12.2.6
GitLab GitLab>=12.2.0<12.2.6
GitLab GitLab>=12.3.0<12.3.2
GitLab GitLab>=12.3.0<12.3.2
Event History
Jan 28, 2020
CVE Published
via MITRE·02:45 AM
Data Sourced
via MITRE·02:45 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-15579?
CVE-2019-15579 is classified as a medium severity vulnerability.
2
How do I fix CVE-2019-15579?
To remediate CVE-2019-15579, upgrade GitLab to version 12.3.2 or later.
3
What does CVE-2019-15579 disclose?
CVE-2019-15579 discloses the assignee(s) of a confidential issue in a private project to guest users through milestones.
4
Which versions of GitLab are affected by CVE-2019-15579?
CVE-2019-15579 affects GitLab Community Edition and Enterprise Edition versions prior to 12.3.2, 12.2.6, and 12.1.12.
5
Is CVE-2019-15579 a critical vulnerability?
CVE-2019-15579 is not considered critical, but it poses a risk of unwanted information exposure.