Description (CNA)
An improper access control vulnerability exists in Gitlab <v12.3.2, <v12.2.6, <v12.1.12 which would allow a blocked user would be able to use GIT clone and pull if he had obtained a CI/CD token before.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / GitLab CE/EE | affected 12.3.2, 12.2.6, 12.1.12 |
CWE
CWE-284
References
ADP enrichment
No English description supplied.