CVE-2021-39896

In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonating, the admin may be logged i...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonating, the admin may be logged in as the second user they impersonated, which may lead to repudiation issues.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"14.1.7"},{"introduced":"14.2.0"},{"fixed":"14.2.5"},{"introduced":"14.3.0"},{"fixed":"14.3.1"}]}]

参照URL

advisory gitlab.com
web gitlab.com
web nvd.nist.gov