CVE-2024-4784 — Authentication Bypass by Primary Weakness in GitLab

CVE-2024-4784

Authentication Bypass by Primary Weakness in GitLab PUBLISHED

Description (CNA)

An issue was discovered in GitLab EE starting from version 16.7 before 17.0.6, version 17.1 before 17.1.4 and 17.2 before 17.2.2 that allowed bypassing the password re-entry requirement to approve a policy.

Affected (CNA)

Vendor / product	Versions
GitLab / GitLab	affected 16.7 before 17.0.6; affected 17.1 before 17.1.4; affected 17.2 before 17.2.2

CWE

CWE-305

References

https://gitlab.com/gitlab-org/gitlab/-/issues/461248
https://hackerone.com/reports/2486223

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.