CVE-2022-4206 - A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report

Back Back to CVE browser

MEDIUM

A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report

Published Feb 1, 2023

6.5

MEDIUM

CVSS 3.1

EPSS 0.64%

Description

A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report

Affected products

Vendor GitLab Product DAST API scanner Default
n/a
- Version
  >=1.6.50, <2.0.102
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

GitLab

DAST API scanner

n/a

Version	Status	Constraints
>=1.6.50, <2.0.102	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-51566
Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4206.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/383083
ExploitIssue TrackingVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-51566		Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4206.json		Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/383083		ExploitIssue TrackingVendor Advisory