Incorrect authorization security vulnerability in GitLab CE/EE - CVE-2022-2244 (rpm)| ID: oval:org.secpod.oval:def:84686 | Date: (C)2022-10-04 (M)2023-08-16 |
| Class: VULNERABILITY | Family: unix |
The host is installed with GitLab CE/EE 14.8 before 14.10.5, 15.0 before 15.0.4 or 15.1 before 15.1.1 and is prone to an incorrect authorization vulnerability. A flaw is present in the application, which fails to properly handle issues in unspecified vectors. Successful exploitation could allows project memebers with reporter role to manage issues in project's error tracking feature.
| Product: |
| gitlab-ce |
| gitlab-ee |
