CVE-2021-39890

It was possible to bypass 2FA for LDAP users and access some specific pages with Basic Authentication in GitLab 14.1.1 and above

Low · published December 6, 2021

CVSS v3.1
3.1
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

It was possible to bypass 2FA for LDAP users and access some specific pages with Basic Authentication in GitLab 14.1.1 and above.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01103 · 65.5th percentile
Published
2021-12-06T17:34Z
EPSS history
Timeline
  • 06 DEC 17:34Z
    It was possible to bypass 2FA for LDAP users and access some specific pages with Basic Authentication in GitLab 14.1.1 and above
    cvelistv5