CVE-2018-19578 - GitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure object reference issue that permits a user with Reporter privileges to view the Jaeger Tracing Operations page

Back Back to CVE browser

MEDIUM

GitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure object reference issue that permits a user with Reporter privileges to view the Jaeger Tracing Operations page

Published Jul 10, 2019

6.5

MEDIUM

CVSS 3.0

EPSS 0.98%

Description

GitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure object reference issue that permits a user with Reporter privileges to view the Jaeger Tracing Operations page.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-285

References (3)

https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/
x_refsource_CONFIRMRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-11267
Advisory
https://gitlab.com/gitlab-org/gitlab-ce/issues/54228
x_refsource_MISCIssue TrackingVendor Advisory

Link	Providers	Tags
https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/		x_refsource_CONFIRMRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-11267		Advisory
https://gitlab.com/gitlab-org/gitlab-ce/issues/54228		x_refsource_MISCIssue TrackingVendor Advisory