Vulnerability CVE-2021-39899

Vulnerability Name:

CVE-2021-39899 (CCN-210632)

Assigned:

2021-10-01

Published:

2021-10-01

Updated:

2021-10-12

Summary:

In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password function. There is a rate limit in place, but the attack may still be conducted by stealing the session id from the physical compromise of the account and splitting the attack over several IP addresses and passing in the compromised session value from these various locations.

CVSS v3 Severity:

4.2 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
3.7 Low (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Physical Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

2.9 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N)
2.6 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Physical Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

1.9 Low (CVSS v2 Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

2.4 Low (CCN CVSS v2 Vector: AV:L/AC:H/Au:S/C:P/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): High Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

Vulnerability Type:

CWE-640

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2021-39899

Source: XF
Type: UNKNOWN
gitlab-cve202139899-brute-force(210632)

Source: CCN
Type: GitLab Web site
CVE-2021-39899

Source: CONFIRM
Type: Vendor Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39899.json

Source: MISC
Type: Broken Link
https://gitlab.com/gitlab-org/gitlab/-/issues/339154

Vulnerable Configuration:

Configuration 1:

cpe:/a:gitlab:gitlab:*:*:*:*:community:*:*:* (Version >= 1.0.0 and < 14.1.7)

OR cpe:/a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* (Version >= 1.0.0 and < 14.1.7)

OR cpe:/a:gitlab:gitlab:*:*:*:*:community:*:*:* (Version >= 14.2 and < 14.2.5)

OR cpe:/a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* (Version >= 14.2 and < 14.2.5)

OR cpe:/a:gitlab:gitlab:*:*:*:*:community:*:*:* (Version >= 14.3 and < 14.3.1)

OR cpe:/a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* (Version >= 14.3 and < 14.3.1)

Denotes that component is vulnerable

BACK