Vulnerabilities > CVE-2022-1124 - Incorrect Authorization vulnerability in Gitlab

047910
CVSS 3.5 - LOW
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
SINGLE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE

Summary

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled

Vulnerable Configurations

Part Description Count
Application
Gitlab
2174

Common Weakness Enumeration (CWE)