CVE-2017-0925

Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password.

Score

CVSS 3.0 7.2 High

Status

Modified - support@hackerone.com

Published

2018-03-21

Last modified

2024-08-05

Weaknesses

CWE-319, CWE-522

Affected products

• Debian Linux (Debian)
• Gitlab (Gitlab)
• Gitlab Community And Enterprise Editions (Gitlab)

References

• https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/
• https://gitlab.com/gitlab-org/gitlab-ee/issues/3847
• https://www.debian.org/security/2018/dsa-4145