2 lines
4.5 KiB
JSON
2 lines
4.5 KiB
JSON
{"affected":[{"affectedData":[{"product":"GitLab","vendor":"GitLab","versions":[{"status":"affected","version":">=14.0, <14.4.5"},{"status":"affected","version":">=14.5.0, <14.5.3"},{"status":"affected","version":">=14.6.0, <14.6.2"}]}],"source":"cve@gitlab.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","matchCriteriaId":"EF09679A-7EA4-42A6-9276-6185FF3785E2","versionEndExcluding":"14.4.5","versionStartIncluding":"14.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","matchCriteriaId":"4D2FE61A-40FA-4896-82ED-0ACFA0648620","versionEndExcluding":"14.4.5","versionStartIncluding":"14.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","matchCriteriaId":"F4792D58-0D9A-43E6-879B-8DC10289BBED","versionEndExcluding":"14.5.3","versionStartIncluding":"14.5.0","vulnerable":true},{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","matchCriteriaId":"2E89DBD2-9B16-4842-B103-B2B4096C046F","versionEndExcluding":"14.5.3","versionStartIncluding":"14.5.0","vulnerable":true},{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","matchCriteriaId":"3881FF6F-04B1-4780-A445-8FD3C5E70211","versionEndExcluding":"14.6.2","versionStartIncluding":"14.6.0","vulnerable":true},{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","matchCriteriaId":"404671C6-4722-446A-B0B3-BA551FEAA4FC","versionEndExcluding":"14.6.2","versionStartIncluding":"14.6.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was not disabling the Autocomplete attribute of fields related to sensitive information making it possible to be retrieved under certain conditions."},{"lang":"es","value":"Se ha detectado un problema en GitLab afectando a todas las versiones a partir de la 14.0 anteriores a 14.4.5, todas las versiones a partir de la 14.5.0 anteriores a 14.5.3, todas las versiones a partir de la 14.6.0 anteriores a 14.6.2. GitLab no deshabilitaba el atributo Autocompletar de los campos relacionados con información confidencial, haciendo posible su recuperación en determinadas condiciones"}],"id":"CVE-2022-0167","lastModified":"2026-06-17T04:20:05.140","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":4.3,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.1,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":0.5,"impactScore":2.5,"source":"cve@gitlab.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2022-07-01T18:15:08.517","references":[{"source":"cve@gitlab.com","tags":["Vendor Advisory"],"url":"https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0167.json"},{"source":"cve@gitlab.com","tags":["Exploit","Vendor Advisory"],"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/339146"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0167.json"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/339146"}],"sourceIdentifier":"cve@gitlab.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"nvd@nist.gov","type":"Primary"}]}
|