CVE-2020-13344
An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Sessions keys are stored in plain-text in Redis whi...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Sessions keys are stored in plain-text in Redis which allows attacker with Redis access to authenticate as any user that has a session stored in Redis
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"10.8.0"},{"fixed":"13.2.10"},{"introduced":"13.3.0"},{"fixed":"13.3.7"},{"introduced":"13.4.0"},{"fixed":"13.4.2"}]}]
Références
- advisory gitlab.com
- report gitlab.com
- web nvd.nist.gov