CVE-2017-0925
CVE-2017-0925
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password.
CVSS 7.2 · High · EPSS 0.9%
- Published
- Updated
Stack: system
Affected products and versions
gitlab community and enterprise editions
- Versions
- 8.10.6 - 10.1.5 Fixed in 10.1.6: Affected
- 10.2.0 - 10.2.5 Fixed in 10.2.6: Affected
- 10.3.0 - 10.3.3 Fixed in 10.3.4: Affected
No fix published
gitlab Ubuntu:16.04:LTS
- Versions
- 8.4.3+dfsg-9
- 8.4.3+dfsg-12
- 8.5.8+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published