CVE-2022-4167
CVE-2022-4167
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2 allows group access tokens to continue working even after the group owner loses the ability to revoke them.
CVSS 5.3 · Medium · EPSS 0.6%
- Published
- Updated
Stack: system
Affected products and versions
gitlab
- Versions
- >=13.11, <15.5.7: Affected
- >=15.6, <15.6.4: Affected
- >=15.7, <15.7.2: Affected
No fix published
check Ubuntu:16.04:LTS
- Versions
- 0.9.10-6.1ubuntu1
- 0.10.0-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
gitlab Ubuntu:16.04:LTS
- Versions
- 8.4.3+dfsg-9
- 8.4.3+dfsg-12
- 8.5.8+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
check Ubuntu:18.04:LTS
- Versions
- 0.10.0-3build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
check Ubuntu:20.04:LTS
- Versions
- 0.10.0-3build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
check Ubuntu:22.04:LTS
- Versions
- 0.15.2-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
check Ubuntu:24.04:LTS
- Versions
- 0.15.2-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
check Ubuntu:25.10
- Versions
- 0.15.2-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
check Ubuntu:26.10
- Versions
- 0.15.2-3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
check Ubuntu:26.04:LTS
- Versions
- 0.15.2-3
- 0.15.2-3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published