Vulnerability CVE-2021-22263

Vulnerability Name:

CVE-2021-22263 (CCN-211128)

Assigned:

2021-10-01

Published:

2021-10-01

Updated:

2021-10-18

Summary:

An issue has been discovered in GitLab affecting all versions starting from 13.0 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions starting from 14.2 before 14.2.2. A user account with 'external' status which is granted 'Maintainer' role on any project on the GitLab instance where 'project tokens' are allowed may elevate its privilege to 'Internal' and access Internal projects.

CVSS v3 Severity:

6.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)
5.7 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): High User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): None

5.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N)
4.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): High User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

5.5 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Partial Availibility (A): None

Vulnerability Type:

CWE-269

Vulnerability Consequences:

Gain Privileges

References:

Source: MITRE
Type: CNA
CVE-2021-22263

Source: XF
Type: UNKNOWN
gitlab-cve202122263-priv-esc(211128)

Source: CCN
Type: GitLab Web site
CVE-2021-22263

Source: CONFIRM
Type: Vendor Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22263.json

Source: MISC
Type: Exploit, Issue Tracking, Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/331473

Source: MISC
Type: Exploit, Third Party Advisory
https://hackerone.com/reports/1193062

Vulnerable Configuration:

Configuration 1:

cpe:/a:gitlab:gitlab:*:*:*:*:community:*:*:* (Version >= 13.0.0 and < 14.0.9)

OR cpe:/a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* (Version >= 13.0.0 and < 14.0.9)

OR cpe:/a:gitlab:gitlab:*:*:*:*:community:*:*:* (Version >= 14.1.0 and < 14.1.4)

OR cpe:/a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* (Version >= 14.1.0 and < 14.1.4)

OR cpe:/a:gitlab:gitlab:*:*:*:*:community:*:*:* (Version >= 14.2.0 and < 14.2.2)

OR cpe:/a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* (Version >= 14.2.0 and < 14.2.2)

Configuration CCN 1:

cpe:/a:gitlab:gitlab:13.0:*:*:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:14.2.1:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:14.1.3:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:14.0.8:*:*:*:community:*:*:*

Denotes that component is vulnerable

BACK