BIT-gitlab-2021-39913

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/gitlab/BIT-gitlab-2021-39913.json

JSON Data

https://api.test.osv.dev/v1/vulns/BIT-gitlab-2021-39913

Aliases

CVE-2021-39913

Published

2024-03-06T11:17:44.886Z

Modified

2025-04-03T14:40:37.652Z

Summary

[none]

Details

Accidental logging of system root password in the migration log in all versions of GitLab CE/EE before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows an attacker with local file system access to obtain system root-level privileges

Database specific

{
    "cpes": [
        "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
        "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
        "cpe:2.3:a:gitlab:gitlab:14.4.0:*:*:*:*:community:*:*",
        "cpe:2.3:a:gitlab:gitlab:14.4.0:*:*:*:*:enterprise:*:*",
        "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
    ],
    "severity": "Medium"
}

References

Affected packages

Bitnami / gitlab

Package

Name: gitlab
Purl: pkg:bitnami/gitlab

Severity

6.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

14.2.6

Introduced

14.3.0

Fixed

14.3.4

Introduced

14.4.0

Fixed

14.4.1

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/gitlab/BIT-gitlab-2021-39913.json"