CVE-2019-15727: Infoleak
Published Sep 16, 2019
·Updated
An issue was discovered in GitLab Community and Enterprise Edition 11.2 through 12.2.1. Insufficient permission checks were being applied when displaying CI results, potentially exposing some CI metrics data to unauthorized users.
Affected Software
6 affected components
GitLab GitLab>=11.2.0<12.0.8
GitLab GitLab>=11.2.0<12.0.8
GitLab GitLab>=12.1.0<12.1.8
GitLab GitLab>=12.1.0<12.1.8
GitLab GitLab>=12.2.0<12.2.3
GitLab GitLab>=12.2.0<12.2.3
Event History
Sep 16, 2019
CVE Published
via MITRE·04:53 PM
Data Sourced
via MITRE·04:53 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-15727?
CVE-2019-15727 has been classified as a medium severity vulnerability due to insufficient permission checks.
2
How do I fix CVE-2019-15727?
To fix CVE-2019-15727, upgrade your GitLab instance to version 12.2.3 or later.
3
What systems are affected by CVE-2019-15727?
CVE-2019-15727 affects GitLab Community and Enterprise Editions from versions 11.2 through 12.2.1.
4
What are the risks associated with CVE-2019-15727?
The risks of CVE-2019-15727 include unauthorized access to CI metrics data by users without proper permissions.
5
How can I verify if my GitLab instance is vulnerable to CVE-2019-15727?
You can verify vulnerability by checking if your GitLab version is between 11.2 and 12.2.1.