GitLab Omnibus GitLab 安全漏洞

漏洞信息详情

Omnibus GitLab是美国GitLab公司的一款打包运行GitLab所需的不同服务和工具的软件包。

GitLab Omnibus GitLab 7.4版本至12.2.1版本中存在安全漏洞。攻击者可利用该漏洞提升权限。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/

来源:MISC

链接:https://gitlab.com/gitlab-org/omnibus-gitlab/issues/4380

来源:about.gitlab.com

链接:https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/

来源:MISC

链接:https://packetstormsecurity.com/files/154734/GitLab-Omnibus-12.2.1-Logrotate-Privilege-Escalation.html

来源:FULLDISC

链接:http://seclists.org/fulldisclosure/2019/Oct/7

来源:www.vuxml.org

链接:http://www.vuxml.org/freebsd/b68cc195-cae7-11e9-86e9-001b217b3468.html

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/154734/GitLab-Omnibus-12.2.1-Logrotate-Privilege-Escalation.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.3315/

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2019-15741

暂无