CVE-2021-22206: Medium severity gitlab vulnerability
Published May 6, 2021
·Updated
An issue has been discovered in GitLab affecting all versions starting from 11.6. Pull mirror credentials are exposed that allows other maintainers to be able to view the credentials in plain-text,
Affected Software
6 affected components
GitLab GitLab>=11.6.0<13.9.7
GitLab GitLab>=11.6.0<13.9.7
GitLab GitLab>=13.10.0<13.10.4
GitLab GitLab>=13.10.0<13.10.4
GitLab GitLab>=13.11.0<13.11.2
GitLab GitLab>=13.11.0<13.11.2
Event History
May 6, 2021
CVE Published
via MITRE·01:25 PM
Data Sourced
via MITRE·01:25 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-22206?
CVE-2021-22206 has been classified as a medium severity vulnerability due to the exposure of sensitive credentials.
2
How do I fix CVE-2021-22206?
To remediate CVE-2021-22206, upgrade your GitLab installation to a version higher than 13.11.2.
3
What versions are affected by CVE-2021-22206?
CVE-2021-22206 affects GitLab versions from 11.6.0 up to 13.11.2.
4
What type of vulnerability is CVE-2021-22206?
CVE-2021-22206 is a credential exposure vulnerability impacting GitLab pull mirror functionality.
5
Who is impacted by CVE-2021-22206?
All maintainers who have access to pull mirrors in affected versions of GitLab are impacted by CVE-2021-22206.