CVE-2019-15591
N/A
N/A
Summary
An improper access control vulnerability exists in GitLab <12.3.3 that allows an attacker to obtain container and dependency scanning reports through the merge request widget even though public pipelines were disabled.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | GitLab | 12.3.3 | affected |
Weaknesses
- CWE-284: Improper Access Control - Generic (CWE-284)
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.