CVE-2022-1944: High severity gitlab vulnerability
When the feature is configured, improper authorization in the Interactive Web Terminal in GitLab CE/EE affecting all versions from 11.3 prior to 14.9.5, 14.10 prior to 14.10.4, and 15.0 prior to 15.0.1 allows users with the Developer role to open terminals on other Developers' running jobs
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1944?
CVE-2022-1944 has a severity rating of medium, affecting improper authorization in GitLab's Interactive Web Terminal.
How do I fix CVE-2022-1944?
To fix CVE-2022-1944, upgrade GitLab to version 14.9.5, 14.10.4, or 15.0.1 or later.
What versions of GitLab are affected by CVE-2022-1944?
CVE-2022-1944 affects all GitLab versions from 11.3 up to but not including 14.9.5, 14.10 up to but not including 14.10.4, and 15.0 up to but not including 15.0.1.
What kind of attack does CVE-2022-1944 allow?
CVE-2022-1944 allows users with the Developer role to open terminals on other Developers' running jobs due to improper authorization.
Is CVE-2022-1944 applicable to GitLab CE, EE, or both?
CVE-2022-1944 affects both GitLab Community Edition (CE) and Enterprise Edition (EE).