2018-10-03 18:29:00 2019-10-03 02:03:26

An issue was discovered in GitLab Community and Enterprise Edition before 11.0.6, 11.1.x before 11.1.5, and 11.2.x before 11.2.2. There is Missing Authorization Control for API Repository Storage.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Gitlab Gitlab 8.10.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.10.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.10.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.10.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.1.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.1.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.1.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.1.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.1.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.0.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.0.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.0.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.0.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.0.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.0.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.0.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.5.10 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.5.9 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.5.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.5.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.5.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.5.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.5.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.5.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.5.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.5.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.5.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.4.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.4.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.4.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.4.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.4.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.4.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.4.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.4.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.3.11 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.3.10 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.3.9 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.3.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.3.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.3.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.3.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.3.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.3.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.3.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.3.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.3.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.2.10 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.2.9 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.2.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.2.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.2.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.2.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.2.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.2.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.2.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.2.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.2.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.1.10 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.1.9 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.1.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.1.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.1.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.1.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.1.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.1.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.1.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.1.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.1.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.0.13 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.0.12 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.0.11 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.0.10 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.0.9 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.0.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.0.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.0.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.0.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.0.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.0.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.0.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.0.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 9.0.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.17.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.17.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.17.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.17.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.17.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.17.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.17.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.17.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.17.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.16.9 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.16.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.16.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.16.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.16.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.16.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.16.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.16.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.16.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.16.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.15.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.15.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.15.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.15.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.15.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.15.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.15.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.15.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.15.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.14.10 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.14.9 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.14.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.14.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.14.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.14.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.14.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.14.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.14.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.14.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.13.11 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.13.12 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.14.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.13.10 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.13.9 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.13.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.13.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.13.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.13.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.13.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.13.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.13.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.13.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.13.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.12.11 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.12.12 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.12.10 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.12.9 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.12.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.12.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.12.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.12.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.12.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.12.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.12.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.12.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.12.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.11.11 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.11.10 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.11.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.11.9 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.11.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.11.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.11.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.11.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.11.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.11.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.11.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.10.13 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.11.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.10.12 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.10.11 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.10.10 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.10.9 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.10.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.10.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.10.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.10.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 8.10.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.1.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.1.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.1.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.2.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.2.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.2.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.2.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.2.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.2.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.2.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.2.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.2.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.3.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.3.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.3.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.3.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.3.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.3.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.3.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.3.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.3.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.3.9 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.4.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.4.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.4.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.4.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.4.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.4.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.4.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.4.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.5.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.5.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.5.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.5.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.5.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.5.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.5.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.5.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.5.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.6.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.6.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.6.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.6.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.6.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.6.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.6.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.7.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.7.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.7.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.7.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.7.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.7.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.7.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.7.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.8.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.8.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.8.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.8.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.8.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.8.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.8.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.8.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.0.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.0.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.0.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.0.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.0.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.0.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.1.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.1.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.1.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.1.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.1.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.2.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.2.1 ~~enterprise~~~ (not an official CPE)