CVE-2020-13264
Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other group maintainers to view Kubernetes cluster token
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other group maintainers to view Kubernetes cluster token
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"10.3.0"},{"fixed":"12.9.8"},{"introduced":"12.10.0"},{"fixed":"12.10.7"},{"introduced":"13.0.0"},{"fixed":"13.0.1"}]}]
Références
- advisory gitlab.com
- report gitlab.com
- report hackerone.com
- web nvd.nist.gov