Description


Missing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker with access to a victim's session to disable two-factor authentication

Related CPE's


a

gitlab

gitlab

2

Weaknesses



CWE-306

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

3.5 · Low

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information


Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-10-04T17:15:08.137

3 years ago

Last modified

2021-10-12T15:57:48.810

3 years ago