Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-14942

An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. Cookies for GitLab Pages (which have access control) could be sent over cleartext HTTP.

Published

2023-04-16T00:15:07.190

Last Modified

2025-02-06T17:15:10.857

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.9 (MEDIUM)

Weaknesses

Type: Primary
CWE-319
Type: Secondary
CWE-319

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	gitlab	gitlab	< 11.11.8	Yes
Application	gitlab	gitlab	< 11.11.8	Yes
Application	gitlab	gitlab	< 12.0.6	Yes
Application	gitlab	gitlab	< 12.0.6	Yes
Application	gitlab	gitlab	< 12.1.6	Yes
Application	gitlab	gitlab	< 12.1.6	Yes

References

https://about.gitlab.com/blog/categories/releases/ Release Notes ([email protected])
https://about.gitlab.com/releases/2019/08/12/critical-security-release-gitlab-12-dot-1-dot-6-released/ Vendor Advisory ([email protected])
https://gitlab.com/gitlab-org/gitlab-pages/issues/232 Broken Link ([email protected])
https://about.gitlab.com/blog/categories/releases/ Release Notes (af854a3a-2127-422b-91ae-364da2661108)
https://about.gitlab.com/releases/2019/08/12/critical-security-release-gitlab-12-dot-1-dot-6-released/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://gitlab.com/gitlab-org/gitlab-pages/issues/232 Broken Link (af854a3a-2127-422b-91ae-364da2661108)