CVE-2022-1983
01.07.2022, 16:15
Incorrect authorization in GitLab EE affecting all versions from 10.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allowed an attacker already in possession of a valid Deploy Key or a Deploy Token to misuse it from any location to access Container Registries even when IP address restrictions were configured.Enginsight
Vendor | Product | Version |
---|---|---|
gitlab | gitlab | 10.7.0 ≤ 𝑥 < 14.10.5 |
gitlab | gitlab | 15.0.0 ≤ 𝑥 < 15.0.4 |
gitlab | gitlab | 15.1.0 |
𝑥
= Vulnerable software versions

Ubuntu Releases