CVE-2017-0927 Vulnerability Details

  /     /     /  

CVE-2017-0927 Metadata Quick Info

CVE Published: 21/03/2018 | CVE Updated: 05/08/2024 | CVE Year: 2017
Source: hackerone | Vendor: GitLab | Product: GitLab Community and Enterprise Editions
Status : PUBLISHED

---

CVE-2017-0927 Description

Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-285
CWE Name: Improper Authorization (CWE-285)
Source: GitLab

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).