A privilege escalation vulnerability was discovered in GitLab affecting versions 16.8 prior to 16.8.4 and 16.9 prior to 16.9.2. It was possible for a user with custom role of `manage_group_access_tokens` to rotate group access tokens with owner privileges.
Metrics
Affected Vendors & Products
References
History
Thu, 29 Aug 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Gitlab
Gitlab gitlab |
|
CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:* | |
Vendors & Products |
Gitlab
Gitlab gitlab |
MITRE
Status: PUBLISHED
Assigner: GitLab
Published: 2024-03-07T00:39:45.501Z
Updated: 2024-09-17T15:39:12.786Z
Reserved: 2024-02-07T06:02:37.306Z
Link: CVE-2024-1299
Vulnrichment
Updated: 2024-08-01T18:33:25.390Z
NVD
Status : Awaiting Analysis
Published: 2024-03-07T01:15:52.443
Modified: 2024-03-07T13:52:27.110
Link: CVE-2024-1299
Redhat
No data.