CVE-2016-4340

Published: Jan 23, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

The impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7, 8.5.0 through 8.5.11, 8.4.0 through 8.4.9, 8.3.0 through 8.3.8, and 8.2.0 through 8.2.4 allows remote authenticated users to "log in" as any other user via unspecified vectors.

Affected (45)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

45 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	Version 8.2.0
Gitlab Gitlab	Version 8.2.1
Gitlab Gitlab	Version 8.2.2
Gitlab Gitlab	Version 8.2.3
Gitlab Gitlab	Version 8.2.4
Gitlab Gitlab	Version 8.3.0
Gitlab Gitlab	Version 8.3.1
Gitlab Gitlab	Version 8.3.2
Gitlab Gitlab	Version 8.3.3
Gitlab Gitlab	Version 8.3.4
Gitlab Gitlab	Version 8.3.5
Gitlab Gitlab	Version 8.3.6
Gitlab Gitlab	Version 8.3.7
Gitlab Gitlab	Version 8.3.8
Gitlab Gitlab	Version 8.4.0
Gitlab Gitlab	Version 8.4.1
Gitlab Gitlab	Version 8.4.2
Gitlab Gitlab	Version 8.4.3
Gitlab Gitlab	Version 8.4.4
Gitlab Gitlab	Version 8.4.5
Gitlab Gitlab	Version 8.4.6
Gitlab Gitlab	Version 8.4.7
Gitlab Gitlab	Version 8.4.8
Gitlab Gitlab	Version 8.4.9
Gitlab Gitlab	Version 8.5.0
Gitlab Gitlab	Version 8.5.10
Gitlab Gitlab	Version 8.5.11
Gitlab Gitlab	Version 8.5.1
Gitlab Gitlab	Version 8.5.2
Gitlab Gitlab	Version 8.5.3
Gitlab Gitlab	Version 8.5.4
Gitlab Gitlab	Version 8.5.5
Gitlab Gitlab	Version 8.5.6
Gitlab Gitlab	Version 8.5.7
Gitlab Gitlab	Version 8.5.8
Gitlab Gitlab	Version 8.5.9
Gitlab Gitlab	Version 8.6.0
Gitlab Gitlab	Version 8.6.1
Gitlab Gitlab	Version 8.6.2
Gitlab Gitlab	Version 8.6.3
Gitlab Gitlab	Version 8.6.4
Gitlab Gitlab	Version 8.6.5
Gitlab Gitlab	Version 8.6.6
Gitlab Gitlab	Version 8.6.7
Gitlab Gitlab	Version 8.7.0