CyberRota Analysis
AI-GeneratedGitLab versions prior to 18.11.7, 19.0.4, and 19.1.2 are vulnerable to a flaw that allows authenticated users with maintainer-role permissions to access another user's stored credentials due to inadequate authorization controls. This could lead to unauthorized access to sensitive information, potentially compromising user accounts and data integrity. Organizations using affected GitLab versions should prioritize remediation to mitigate the risk of credential theft.
Original NVD Description
GitLab has remediated an issue in GitLab EE affecting all versions from 9.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with maintainer-role permissions to obtain another user's stored credentials due to improper authorization controls.
Related CVEs
Other vulnerabilities affecting the same vendor(s)