CVE-2024-4784CWE-305

Authentication Bypass by Primary Weakness in GitLab

Medium · published August 8, 2024

CVSS v3.1
4.2
EPSS
0%
Percentile
20.8
In the wild
Unconfirmed
What it is

An issue was discovered in GitLab EE starting from version 16.7 before 17.0.6, version 17.1 before 17.1.4 and 17.2 before 17.2.2 that allowed bypassing the password re-entry requirement to approve a policy.

The record
Technical detail
CVSS v3.1
4.2 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00293 · 20.8th percentile
Weakness
CWE-305 · Authentication Bypass by Primary Weakness
Published
2024-08-08T10:02Z
EPSS history
Timeline
  • 08 AUG 10:02Z
    Authentication Bypass by Primary Weakness in GitLab
    cvelistv5