CVE-2021-22240: Medium severity gitlab vulnerability
Published Aug 5, 2021
·Updated
Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on despite user cap being enabled
Affected Software
3 affected components
GitLab GitLab>=13.7.0<13.11.6
GitLab GitLab>=13.12.0<13.12.6
GitLab GitLab>=14.0.0<14.0.2
Event History
Aug 5, 2021
CVE Published
via MITRE·07:25 PM
Data Sourced
via MITRE·07:25 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-22240?
CVE-2021-22240 is classified as a high severity vulnerability due to its impact on user access controls.
2
How do I fix CVE-2021-22240?
To fix CVE-2021-22240, upgrade to GitLab EE version 13.11.7, 13.12.7, or 14.0.3 or later.
3
What systems are affected by CVE-2021-22240?
CVE-2021-22240 affects GitLab EE versions 13.11.6, 13.12.6, and 14.0.2.
4
Can CVE-2021-22240 be exploited remotely?
Yes, CVE-2021-22240 can potentially be exploited remotely through improper access controls.
5
What is the nature of CVE-2021-22240?
CVE-2021-22240 involves improper access control allowing users to bypass restrictions via single sign-on.