CVE-2021-39891
EUVD-2021-2624705.10.2021, 14:15
In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are not cleared at the end of impersonation which may lead to unnecessary sensitive info disclosure.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 8.0.0 ≤ 𝑥 < 14.1.7 |
| gitlab | gitlab | 8.0.0 ≤ 𝑥 < 14.1.7 |
| gitlab | gitlab | 14.2.0 ≤ 𝑥 < 14.2.5 |
| gitlab | gitlab | 14.2.0 ≤ 𝑥 < 14.2.5 |
| gitlab | gitlab | 14.3.0 ≤ 𝑥 < 14.3.1 |
| gitlab | gitlab | 14.3.0 ≤ 𝑥 < 14.3.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases