CVE-2021-39890: Critical severity gitlab vulnerability
It was possible to bypass 2FA for LDAP users and access some specific pages with Basic Authentication in GitLab 14.1.1 and above.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-39890?
CVE-2021-39890 has been classified as a high severity vulnerability due to the potential for bypassing two-factor authentication for LDAP users.
Which versions of GitLab are affected by CVE-2021-39890?
CVE-2021-39890 affects GitLab versions 14.1.1 to 14.1.7, 14.2.0 to 14.2.5, and specifically 14.3.0 to 14.3.1.
How do I fix CVE-2021-39890?
To fix CVE-2021-39890, upgrade GitLab to the latest version that is not affected by this vulnerability.
What impact does CVE-2021-39890 have on users?
CVE-2021-39890 allows unauthorized access to specific pages by bypassing two-factor authentication, compromising user security.
Is it safe to use GitLab if I'm on a vulnerable version related to CVE-2021-39890?
Using a vulnerable version of GitLab related to CVE-2021-39890 is not safe, and immediate action should be taken to upgrade to mitigate the risk.