An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an incorrect access vulnerability that allows an unauthorized user to view private group names.
References
Link | Resource |
---|---|
https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/ | Release Notes Vendor Advisory |
https://gitlab.com/gitlab-org/gitlab-ce/issues/51262 | Issue Tracking Vendor Advisory |
https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/ | Release Notes Vendor Advisory |
https://gitlab.com/gitlab-org/gitlab-ce/issues/51262 | Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:58
Type | Values Removed | Values Added |
---|---|---|
References | () https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/ - Release Notes, Vendor Advisory | |
References | () https://gitlab.com/gitlab-org/gitlab-ce/issues/51262 - Issue Tracking, Vendor Advisory |
Information
Published : 2019-07-10 15:15
Updated : 2024-11-21 03:58
NVD link : CVE-2018-19494
Mitre link : CVE-2018-19494
CVE.ORG link : CVE-2018-19494
JSON object : View
Products Affected
gitlab
- gitlab
CWE
CWE-284
Improper Access Control