Vulnerability CVE-2022-3285

Vulnerability Name:

CVE-2022-3285 (CCN-237552)

Assigned:

2022-09-29

Published:

2022-09-29

Updated:

2022-11-11

Summary:

Bypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an unauthorized attacker to prevent access to GitLab

CVSS v3 Severity:

7.5 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
6.5 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
4.6 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

CWE-Other

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2022-3285

Source: CCN
Type: GitLab Web site
GitLab Security Release: 15.4.1, 15.3.4, and 15.2.5

Source: XF
Type: UNKNOWN
gitlab-cve20223285-dos(237552)

Source: CONFIRM
Type: Vendor Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3285.json

Source: MISC
Type: Permissions Required, Vendor Advisory
https://gitlab.com/gitlab-org/security/omnibus-gitlab/-/issues/64

Vulnerable Configuration:

Configuration 1:

cpe:/a:gitlab:gitlab:15.4.0:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:15.4.0:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:*:*:*:*:community:*:*:* (Version >= 15.3.0 and < 15.3.4)

OR cpe:/a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* (Version >= 15.3.0 and < 15.3.4)

OR cpe:/a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* (Version >= 12.0.0 and < 15.2.5)

OR cpe:/a:gitlab:gitlab:*:*:*:*:community:*:*:* (Version >= 12.0.0 and < 15.2.5)

Denotes that component is vulnerable

BACK