When the feature is configured, improper authorization in the Interactive Web Terminal in GitLab CE/EE affecting all versions from 11.3 prior to 14.9.5, 14.10 prior to 14.10.4, and 15.0 prior to 15.0.1 allows users with the Developer role to open terminals on other Developers' running jobs
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GitLab
Published: 2022-06-06T16:58:35
Updated: 2024-08-03T00:24:42.991Z
Reserved: 2022-05-30T00:00:00
Link: CVE-2022-1944
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-06-06T17:15:10.867
Modified: 2024-11-21T06:41:48.437
Link: CVE-2022-1944
Redhat
No data.