CVE-2022-2095
Last modified
CVE-2022-2095 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. An improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows a malicious authenticated user to view a public project's Deploy Key's public fingerprint and name when that key has write permission. Note that GitLab never asks for nor stores the private key.. EPSS estimates a 0.73% chance of exploitation in the next 30 days.
Description
An improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows a malicious authenticated user to view a public project's Deploy Key's public fingerprint and name when that key has write permission. Note that GitLab never asks for nor stores the private key.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gitlab | Gitlab | >= 13.7.0, < 15.0.5 |
| Gitlab | Gitlab | >= 15.1.0, < 15.1.4 |
| Gitlab | Gitlab | 15.2 |
References
- https://gitlab.com/gitlab-org/gitlab/-/issues/365415Broken Link, Vendor Advisory
- https://hackerone.com/reports/1600325Permissions Required, Third Party Advisory
- https://gitlab.com/gitlab-org/gitlab/-/issues/365415Broken Link, Vendor Advisory
- https://hackerone.com/reports/1600325Permissions Required, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-2095?
How severe is CVE-2022-2095?
How do I fix CVE-2022-2095?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-20944A vulnerability in the software image verification functiona…6.8
- CVE-2022-20945A vulnerability in the 802.11 association frame validation o…6.5
- CVE-2022-20946A vulnerability in the generic routing encapsulation (GRE) t…7.5
- CVE-2022-20947A vulnerability in dynamic access policies (DAP) functionali…7.5
- CVE-2022-20948A vulnerability in the web management interface of Cisco&nbs…5.4
- CVE-2022-20949A vulnerability in the management web server of Cisco Firepo…4.9
- CVE-2022-20950A vulnerability in the interaction of SIP and Snort 3 for Ci…5.3
- CVE-2022-20951A vulnerability in the web-based management interface of Cis…6.5
- CVE-2022-20952A vulnerability in the scanning engines of Cisco AsyncOS Sof…5.3
- CVE-2022-20953Multiple vulnerabilities in Cisco TelePresence Collaboration…5.5
- CVE-2022-20954Multiple vulnerabilities in Cisco TelePresence Collaboration…7.1
- CVE-2022-20955Multiple vulnerabilities in Cisco TelePresence Collaboration…7.1
Are you affected by CVE-2022-2095?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST