CVE-2019-5486

HIGH WAF: Low
CVSS 8.8 Published: 2019-12-18
CWE-287

A authentication bypass vulnerability exists in GitLab CE/EE

WAF Coverage Analysis

Improper Authentication Low WAF Coverage

OWASP: A07:2021 Identification and Authentication Failures

Affected Software

VendorProductVersion
gitlabgitlabup to 12.1.10
gitlabgitlabup to 12.1.10
gitlabgitlab12.2.0 - 12.2.6
gitlabgitlab12.2.0 - 12.2.6
gitlabgitlab12.3.0 - 12.3.2
gitlabgitlab12.3.0 - 12.3.2

References

Back to CVE Database