CVE-2019-19087

Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 2 of 2).

• CWE-732

• https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/Release Notes, Vendor Advisory
• https://about.gitlab.com/blog/categories/releases/Release Notes, Vendor Advisory
• https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/Release Notes, Vendor Advisory
• https://about.gitlab.com/blog/categories/releases/Release Notes, Vendor Advisory

Published

Jan 3, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19081A memory leak in the nfp_flower_spawn_vnic_reprs() function …5.9
• CVE-2019-19082Memory leaks in *create_resource_pool() functions under driv…4.7
• CVE-2019-19083Memory leaks in *clock_source_create() functions under drive…4.7
• CVE-2019-19084In Octopus Deploy 3.3.0 through 2019.10.4, an authenticated …4.3
• CVE-2019-19085A persistent cross-site scripting (XSS) vulnerability in Oct…5.4
• CVE-2019-19086Gitlab Enterprise Edition (EE) before 12.5.1 has Insecure Pe…4.3
• CVE-2019-19088Gitlab Enterprise Edition (EE) 11.3 through 12.4.2 allows Di…9.8
• CVE-2019-19089For ABB eSOMS versions 4.0 to 6.0.3, the X-Content-Type-Opti…6.1
• CVE-2019-1909A vulnerability in the implementation of Border Gateway Prot…6.8
• CVE-2019-19090For ABB eSOMS versions 4.0 to 6.0.2, the Secure Flag is not …3.5
• CVE-2019-19091For ABB eSOMS versions 4.0 to 6.0.3, HTTPS responses contain…4.3
• CVE-2019-19092ABB eSOMS versions 4.0 to 6.0.3 use ASP.NET Viewstate withou…3.5