CVE-2017-0925
Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password.
Références
- advisory about.gitlab.com
- advisory debian.org
- report gitlab.com