GitLab up to 13.0.11/13.1.5/13.2.2 Group Transfer privileges management

Summaryinfo

A vulnerability has been found in GitLab up to 13.0.11/13.1.5/13.2.2 and classified as critical. Affected by this issue is some unknown functionality of the component Group Transfer Handler. Performing a manipulation results in privileges management. This vulnerability is reported as CVE-2020-13282. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

Detailsinfo

A vulnerability, which was classified as problematic, was found in GitLab up to 13.0.11/13.1.5/13.2.2 (Bug Tracking Software). This affects an unknown part of the component Group Transfer Handler. The manipulation with an unknown input leads to a privileges management vulnerability. CWE is classifying the issue as CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

For GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent group keep their access level on the subgroup leading to improper access.

The weakness was disclosed 08/13/2020 (Website). The advisory is shared at gitlab.com. This vulnerability is uniquely identified as CVE-2020-13282 since 05/21/2020. The exploitability is told to be difficult. It is possible to initiate the attack remotely. Additional levels of successful authentication are required for exploitation. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1068 for this issue.

Upgrading to version 13.0.12, 13.1.6 or 13.2.3 eliminates this vulnerability.

The entries VDB-159900, VDB-159899, VDB-159898 and VDB-159896 are pretty similar. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Bug Tracking Software

Name

• GitLab

Version

• 13.0.0
• 13.0.1
• 13.0.2
• 13.0.3
• 13.0.4
• 13.0.5
• 13.0.6
• 13.0.7
• 13.0.8
• 13.0.9
• 13.0.10
• 13.0.11
• 13.1.0
• 13.1.1
• 13.1.2
• 13.1.3
• 13.1.4
• 13.1.5
• 13.2.0
• 13.2.1
• 13.2.2

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion