CVE-2019-9756 - An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1

Back Back to CVE browser

CRITICAL

An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1

Published Apr 17, 2019

9.8

CRITICAL

CVSS 3.0

EPSS 2.15%

Description

An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control, a different vulnerability than CVE-2019-9732.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-639

Authorization Bypass

References (4)

https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/
x_refsource_CONFIRMVendor Advisory
https://about.gitlab.com/blog/categories/releases/
x_refsource_MISCProductVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19119
Advisory
https://gitlab.com/gitlab-org/gitlab-ce/issues/54243
x_refsource_CONFIRMExploitVendor Advisory

Link	Providers	Tags
https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/		x_refsource_CONFIRMVendor Advisory
https://about.gitlab.com/blog/categories/releases/		x_refsource_MISCProductVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19119		Advisory
https://gitlab.com/gitlab-org/gitlab-ce/issues/54243		x_refsource_CONFIRMExploitVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 17, 2019

Updated Aug 4, 2024

Reserved Mar 13, 2019

Link CVE-2019-9756

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-9756

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Apr 17, 2019

Updated Aug 4, 2024

Link EUVD-2019-19119

GitHub

No data