CVE-2023-5009

An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies. This was a bypass of [CVE-2023-3932](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3932) showing additional impact.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://gitlab.com/gitlab-org/gitlab/-/issues/425304	Broken Link
https://hackerone.com/reports/2147126	Permissions Required

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:gitlab:gitlab:::::enterprise:::*
	cpe:2.3:a:gitlab:gitlab:::::enterprise:::*

History

03 Oct 2024, 07:15

Type	Values Removed	Values Added
CWE	~~CWE-284~~	CWE-863

21 Sep 2023, 18:44

Type	Values Removed	Values Added
CWE		NVD-CWE-Other
References	~~(MISC) https://gitlab.com/gitlab-org/gitlab/-/issues/425304 -~~	(MISC) https://gitlab.com/gitlab-org/gitlab/-/issues/425304 - Broken Link
References	~~(MISC) https://hackerone.com/reports/2147126 -~~	(MISC) https://hackerone.com/reports/2147126 - Permissions Required
First Time		Gitlab Gitlab gitlab
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.8
CPE		cpe:2.3:a:gitlab:gitlab:::::enterprise:::*

19 Sep 2023, 08:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-09-19 08:16

Updated : 2024-10-03 07:15

NVD link : CVE-2023-5009

Mitre link : CVE-2023-5009

CVE.ORG link : CVE-2023-5009

JSON object : View

Products Affected

gitlab

gitlab

CWE

NVD-CWE-Other CWE-863

Incorrect Authorization

{"id": "CVE-2023-5009", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "cve@gitlab.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.8, "exploitabilityScore": 1.8}]}, "published": "2023-09-19T08:16:07.203", "references": [{"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/425304", "tags": ["Broken Link"], "source": "cve@gitlab.com"}, {"url": "https://hackerone.com/reports/2147126", "tags": ["Permissions Required"], "source": "cve@gitlab.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}, {"type": "Secondary", "source": "cve@gitlab.com", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies. This was a bypass of [CVE-2023-3932](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3932) showing additional impact."}, {"lang": "es", "value": "Se ha descubierto un problema en GitLab EE que afecta a todas las versiones a partir de 13.12 antes de 16.2.7, todas las versiones a partir de 16.3 antes de 16.3.4. Era posible que un atacante ejecutara trabajos de canalizaci\u00f3n como un usuario arbitrario a trav\u00e9s de directivas de an\u00e1lisis de seguridad programadas. Esta fue una omisi\u00f3n de [CVE-2023-3932](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3932) que muestra un impacto adicional. "}], "lastModified": "2024-10-03T07:15:21.857", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "705EDAB3-930B-4B00-BAD7-B5035FB0B1F6", "versionEndExcluding": "16.2.7", "versionStartIncluding": "13.12"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "5CCAE929-1AE7-4E4E-BBF9-3D2A7D1ACBDA", "versionEndExcluding": "16.3.4", "versionStartIncluding": "16.3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@gitlab.com"}