GitLab Community Edition/Enterprise Edition up to 11.8.8/11.9.9/11.10.1 Merge Request race condition

Summaryinfo

A vulnerability, which was classified as critical, has been found in GitLab Community Edition and Enterprise Edition up to 11.8.8/11.9.9/11.10.1. Impacted is an unknown function. The manipulation as part of Merge Request leads to race condition. This vulnerability is listed as CVE-2019-11546. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 11.8.8/11.9.9/11.10.1 (Bug Tracking Software). It has been rated as critical. This issue affects an unknown functionality. The manipulation as part of a Merge Request leads to a race condition vulnerability. Using CWE to declare the problem leads to CWE-362. The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It has a Race Condition which could allow users to approve a merge request multiple times and potentially reach the approval count required to merge.

The weakness was presented 09/09/2019 (Website). It is possible to read the advisory at about.gitlab.com. The identification of this vulnerability is CVE-2019-11546 since 04/25/2019. The attack may be initiated remotely. The successful exploitation needs a simple authentication. The technical details are unknown and an exploit is not publicly available.

Upgrading to version 11.8.9, 11.9.10 or 11.10.2 eliminates this vulnerability.

See VDB-141441, VDB-141442, VDB-141444 and VDB-141445 for similar entries. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Bug Tracking Software

Vendor

• GitLab

Name

• Community Edition
• Enterprise Edition

Version

• 11.8.0
• 11.8.1
• 11.8.2
• 11.8.3
• 11.8.4
• 11.8.5
• 11.8.6
• 11.8.7
• 11.8.8
• 11.9.0
• 11.9.1
• 11.9.2
• 11.9.3
• 11.9.4
• 11.9.5
• 11.9.6
• 11.9.7
• 11.9.8
• 11.9.9
• 11.10.0
• 11.10.1

License

• open-source

Website

• Vendor: https://gitlab.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion