CVE-2021-39913: Medium severity GitLab GitLab vulnerability
Accidental logging of system root password in the migration log in all versions of GitLab CE/EE before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows an attacker with local file system access to obtain system root-level privileges
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-39913?
CVE-2021-39913 is a vulnerability in GitLab CE/EE that allows an attacker with local file system access to obtain system root-level privileges.
Which GitLab versions are affected by CVE-2021-39913?
All versions of GitLab CE/EE before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 are affected by CVE-2021-39913.
What is the severity of CVE-2021-39913?
CVE-2021-39913 has a severity value of 6.7 (high).
How can an attacker exploit CVE-2021-39913?
An attacker with local file system access can exploit CVE-2021-39913 to obtain system root-level privileges by accessing the accidental logging of the system root password in the migration log.
Where can I find more information about CVE-2021-39913?
You can find more information about CVE-2021-39913 at the following references: [link1](https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39913.json) and [link2](https://gitlab.com/gitlab-org/gitlab/-/issues/28074).