Vulnerabilities > CVE-2021-39896 - Unspecified vulnerability in Gitlab

047910
CVSS 3.8 - LOW
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
gitlab

Summary

In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonating, the admin may be logged in as the second user they impersonated, which may lead to repudiation issues.

Vulnerable Configurations

Part Description Count
Application
Gitlab
1773