Improper Authentication The advisory has been revoked - it doesn't affect any version of package gitlab  (opens in a new tab)


Threat Intelligence

EPSS
1.09% (62nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-DEBIANUNSTABLE-GITLAB-543990
  • published3 Feb 2020
  • disclosed5 Feb 2020

Introduced: 3 Feb 2020

CVE-2020-7968  (opens in a new tab)
CWE-287  (opens in a new tab)

Amendment

The Debian security team deemed this advisory irrelevant for Debian:unstable.

NVD Description

Note: Versions mentioned in the description apply only to the upstream gitlab package and not the gitlab package as distributed by Debian.

GitLab EE 8.0 through 12.7.2 has Incorrect Access Control.