CVE-2022-1426: Medium severity gitlab vulnerability
An issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly authenticating a user that had some certain amount of information which allowed an user to authenticate without a personal access token.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1426?
CVE-2022-1426 is rated as a high severity vulnerability due to its impact on user authentication.
How do I fix CVE-2022-1426?
To remediate CVE-2022-1426, upgrade GitLab to version 14.8.6 or later, or 14.9.4 or later, or 14.10.1 or later.
What versions of GitLab are affected by CVE-2022-1426?
CVE-2022-1426 affects GitLab versions from 12.6 before 14.8.6, 14.9 before 14.9.4, and 14.10 before 14.10.1.
Who is impacted by CVE-2022-1426?
All users of GitLab versions specified in the vulnerability are impacted if they are running affected versions.
Can I verify my GitLab version in relation to CVE-2022-1426?
Yes, you can verify your installed GitLab version through the application interface or command line to see if it's vulnerable.