Download
| Alert*
|
oval:org.secpod.oval:def:106741
gitolite3 is installed oval:org.secpod.oval:def:106234 Gitolite allows a server to host many git repositories and provide access to many developers, without having to give them real userids on the server. The essential magic in doing this is ssh"s pubkey access and the authorized keys file, and the inspiration was an older program called gitosis. Gitoli ... oval:org.secpod.oval:def:1600935 Gitolite before 3.6.9 does not properly restrict access to a Git repository that is in the process of being migrated until the full set of migration steps has been completed. This can allow valid users to obtain unintended access. See: https://nvd.nist.gov/vuln/detail/CVE-2018-16976 oval:org.secpod.oval:def:115119 Gitolite allows a server to host many git repositories and provide access to many developers, without having to give them real userids on the server. The essential magic in doing this is ssh's pubkey access and the authorized keys file, and the inspiration was an older program called gitosis. Gi ... oval:org.secpod.oval:def:115121 Gitolite allows a server to host many git repositories and provide access to many developers, without having to give them real userids on the server. The essential magic in doing this is ssh's pubkey access and the authorized keys file, and the inspiration was an older program called gitosis. Gi ... |
