CVE-2019-9485: Critical severity gitlab vulnerability
Published May 29, 2019
·Updated
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions.
Affected Software
6 affected components
GitLab GitLab<11.6.10
GitLab GitLab<11.6.10
GitLab GitLab>=11.7.0<11.7.6
GitLab GitLab>=11.7.0<11.7.6
GitLab GitLab>=11.8.0<11.8.1
GitLab GitLab>=11.8.0<11.8.1
Event History
May 29, 2019
CVE Published
via MITRE·04:08 PM
Data Sourced
via MITRE·04:08 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-9485?
CVE-2019-9485 has been classified as a medium severity vulnerability due to its potential impact on sensitive data.
2
How do I fix CVE-2019-9485?
To fix CVE-2019-9485, upgrade GitLab to version 11.6.10, 11.7.6, or 11.8.1 or later.
3
What versions are affected by CVE-2019-9485?
CVE-2019-9485 affects GitLab Community and Enterprise Edition versions prior to 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1.
4
What are the implications of CVE-2019-9485?
The implications of CVE-2019-9485 include potential unauthorized access to sensitive data due to insecure permissions.
5
Is CVE-2019-9485 exploitable remotely?
Yes, CVE-2019-9485 is exploitable remotely, which increases the risk of unauthorized access to the affected systems.