CVE-2017-0925 Vulnerability Details

  /     /     /  

CVE-2017-0925 Metadata Quick Info

CVE Published: 21/03/2018 | CVE Updated: 05/08/2024 | CVE Year: 2017
Source: hackerone | Vendor: GitLab | Product: GitLab Community and Enterprise Editions
Status : PUBLISHED

---

CVE-2017-0925 Description

Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-522
CWE Name: Insufficiently Protected Credentials (CWE-522)
Source: GitLab

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).