CVE-2019-19262: Medium severity gitlab vulnerability
Published Jan 3, 2020
·Updated
GitLab Enterprise Edition (EE) 11.9 and later through 12.5 has Insecure Permissions.
Affected Software
1 affected component
GitLab GitLab>=11.9.0<12.5.2
Event History
Jan 3, 2020
CVE Published
via MITRE·04:36 PM
Data Sourced
via MITRE·04:36 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-19262?
The severity of CVE-2019-19262 is considered to be moderate, impacting the GitLab Enterprise Edition with potential unauthorized access.
2
How do I fix CVE-2019-19262?
To fix CVE-2019-19262, upgrade GitLab Enterprise Edition to version 12.5.2 or later as recommended in security updates.
3
What versions are affected by CVE-2019-19262?
CVE-2019-19262 affects GitLab Enterprise Edition versions between 11.9.0 and 12.5.2 inclusive.
4
What are the risks associated with CVE-2019-19262?
The risks associated with CVE-2019-19262 include the potential for unauthorized users to gain access to sensitive information in GitLab.
5
Is there a patch available for CVE-2019-19262?
Yes, a patch is available through updating to GitLab Enterprise Edition version 12.5.2 or higher.