CVE-2019-5486CWE-288

A authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in the Salesforce login integration that could be used by an…

published December 18, 2019

CVSS
—
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

A authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in the Salesforce login integration that could be used by an attacker to create an account that bypassed domain restrictions and email verification requirements.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01511 · 74.1th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2019-12-18T20:58Z
EPSS history
Timeline
  • 18 DEC 20:58Z
    A authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in the Salesforce login integration that could be used by an…
    cvelistv5