2019-09-16 19:15:13 2019-09-17 20:25:52

An issue was discovered in GitLab Community and Enterprise Edition 10.8 through 12.2.1. An internal endpoint unintentionally allowed group maintainers to view and edit group runner settings.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

NONE
Gitlab Gitlab 10.8.0 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.8.0 Pre ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.0 Rc1 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.0 Rc10 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.0 Rc11 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.0 Rc12 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.0 Rc13 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.0 Rc2 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.0 Rc3 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.0 Rc4 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.0 Rc5 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.0 Rc6 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.0 Rc7 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.0 Rc8 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.0 Rc9 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.1 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.8.2 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.8.3 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.8.4 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.8.5 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.8.6 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.8.7 ~~community~~~ (not an official CPE) Gitlab Gitlab 10.8.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 10.9.0 - ~~community~~~ (not an official CPE) Gitlab Gitlab 10.9.0 Pre ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.0 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.0.0 Pre ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.0 Rc1 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.0 Rc10 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.0 Rc11 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.0 Rc12 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.0 Rc13 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.0 Rc14 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.0 Rc2 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.0 Rc3 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.0 Rc4 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.0 Rc5 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.0 Rc6 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.0 Rc7 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.0 Rc8 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.0 Rc9 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.1 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.0.2 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.0.3 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.0.4 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.0.5 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.0.6 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.0.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.1.0 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.1.0 Pre ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.0 Rc1 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.0 Rc10 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.0 Rc11 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.0 Rc12 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.0 Rc13 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.0 Rc14 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.0 Rc2 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.0 Rc3 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.0 Rc4 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.0 Rc5 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.0 Rc6 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.0 Rc7 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.0 Rc8 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.0 Rc9 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.1 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.1.2 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.1.3 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.1.4 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.1.5 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.1.6 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.1.7 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.1.8 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.1.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.2.0 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.2.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.2.1 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.2.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.2.2 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.2.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.2.3 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.2.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.2.4 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.2.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.2.5 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.2.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.2.6 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.2.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.2.7 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.2.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.2.8 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.2.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.3.0 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.3.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.3.1 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.3.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.3.2 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.3.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.3.3 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.3.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.3.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.3.5 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.3.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.3.6 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.3.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.3.7 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.3.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.3.8 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.3.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.3.9 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.3.9 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.3.10 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.3.10 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.3.11 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.3.11 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.3.12 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.3.12 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.3.13 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.3.13 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.3.14 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.3.14 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.4.0 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.4.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.4.1 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.4.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.4.2 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.4.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.4.3 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.4.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.4.4 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.4.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.4.5 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.4.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.4.6 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.4.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.4.7 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.4.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.4.8 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.4.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.4.9 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.4.9 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.4.10 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.4.10 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.4.11 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.4.11 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.4.12 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.4.12 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.4.13 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.4.13 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.4.14 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.4.14 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.0 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.0 - ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.0 - ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc1 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc10 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc10 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc11 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc11 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc12 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc12 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc13 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc13 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc2 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc3 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc4 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc5 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc6 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc7 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc8 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc9 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.0 Rc9 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.1 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.2 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.3 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.5 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.8 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.5.10 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.5.10 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.6.0 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.6.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.6.1 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.6.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.6.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.6.3 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.6.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.6.4 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.6.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.6.5 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.6.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.6.6 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.6.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.6.8 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.6.8 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.6.9 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.6.9 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.6.10 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.6.10 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.7.0 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.7.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.7.1 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.7.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.7.2 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.7.3 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.7.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.7.4 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.7.4 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.7.5 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.7.5 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.7.6 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.7.6 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.7.7 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.7.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.7.11 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.8.0 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.8.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.8.1 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.8.1 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.8.2 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.8.2 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.8.3 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.8.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.8.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.9.0 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.9.7 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.10.3 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 11.13.14 ~~community~~~ (not an official CPE) Gitlab Gitlab 11.13.14 ~~enterprise~~~ (not an official CPE) Gitlab Gitlab 12.2.1 ~~community~~~ (not an official CPE) Gitlab Gitlab 12.2.1 ~~enterprise~~~ (not an official CPE)