CVE-2021-39899
published 2021-10-04CVE-2021-39899: In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password function…
PriorityP416medium4.2CVSS 3.1
AVPACHPRNUINSUCHINAN
EPSS
0.25%
16.1th percentile
In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password function. There is a rate limit in place, but the attack may still be conducted by stealing the session id from the physical compromise of the account and splitting the attack over several IP addresses and passing in the compromised session value from these various locations.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gitlab | < gitlab 15.10.8+ds1-2 (sid) | gitlab 15.10.8+ds1-2 (sid) |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | >= 1.0.0 < 14.1.7 | 14.1.7 |
| gitlab | gitlab | >= 14.2 < 14.2.5 | 14.2.5 |
| gitlab | gitlab | >= 14.3 < 14.3.1 | 14.3.1 |
| gitlab | gitlab_ce | — | — |
CVSS provenance
nvdv3.14.2MEDIUMCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.01.9LOWAV:L/AC:M/Au:N/C:P/I:N/A:N
osv4.2MEDIUM
vendor_debian2.9LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GitLab
CVE-2021-39899: In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password func
vendor_gitlab·2021-10-04·CVSS 2.9
CVE-2021-39899 [LOW] CWE-640 CVE-2021-39899: In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password func
CVE-2021-39899: In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password function. There is a rate limit in place, but the attack may still be conducted by stealing the session id from the physical compromise of the account and splitting the attack over several IP addresses and passing in the compromised session value from these various locations.
Debian
CVE-2021-39899: gitlab - In all versions of GitLab CE/EE, an attacker with physical access to a user’s ma...
vendor_debian·2021·CVSS 2.9
CVE-2021-39899 [LOW] CVE-2021-39899: gitlab - In all versions of GitLab CE/EE, an attacker with physical access to a user’s ma...
In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password function. There is a rate limit in place, but the attack may still be conducted by stealing the session id from the physical compromise of the account and splitting the attack over several IP addresses and passing in the compromised session value from these various locations.
Scope: local
sid: resolved (fixed in 15.10.8+ds1-2)
GHSA
GHSA-f3cp-f6ph-xxhj: In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password func
ghsa_unreviewed·2022-05-24
CVE-2021-39899 [MEDIUM] CWE-640 GHSA-f3cp-f6ph-xxhj: In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password func
In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password function. There is a rate limit in place, but the attack may still be conducted by stealing the session id from the physical compromise of the account and splitting the attack over several IP addresses and passing in the compromised session value from these various locations.
OSV
CVE-2021-39899: In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password func
osv·2021-10-04·CVSS 4.2
CVE-2021-39899 [MEDIUM] CVE-2021-39899: In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password func
In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password function. There is a rate limit in place, but the attack may still be conducted by stealing the session id from the physical compromise of the account and splitting the attack over several IP addresses and passing in the compromised session value from these various locations.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-10-04
Published