CVE-2021-22189

Published: Mar 4, 2021Modified: Nov 21, 2024

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the certificates for the Fortinet OTP that could result in authentication issues.

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	Before 13.6.7
Gitlab Gitlab	From 13.7.0 to 13.7.7
Gitlab Gitlab	From 13.8.0 to 13.8.4
Gitlab Gitlab	Before 13.6.7
Gitlab Gitlab	From 13.7.0 to 13.7.7
Gitlab Gitlab	From 13.8.0 to 13.8.4