CVE-2016-4340

high-risk
Published 2017-01-23

The impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7, 8.5.0 through 8.5.11, 8.4.0 through 8.4.9, 8.3.0 through 8.3.8, and 8.2.0 through 8.2.4 allows remote authenticated users to "log in" as any other user via unspecified vectors.

Do I need to act?

~
2.5% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
!
1 public exploit available
40236
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10 High
NETWORK / LOW complexity

Affected Products (20)

Affected Vendors

Gitlab

References (8)

Exploit http://packetstormsecurity.com/files/138368/GitLab-Impersonate-Privilege-Escalat...
Mitigation https://about.gitlab.com/2016/05/02/cve-2016-4340-patches/
Issue Tracking https://gitlab.com/gitlab-org/gitlab-ce/issues/15548
Exploit https://www.exploit-db.com/exploits/40236/
Exploit http://packetstormsecurity.com/files/138368/GitLab-Impersonate-Privilege-Escalat...
Mitigation https://about.gitlab.com/2016/05/02/cve-2016-4340-patches/
Issue Tracking https://gitlab.com/gitlab-org/gitlab-ce/issues/15548
Exploit https://www.exploit-db.com/exploits/40236/
61
/ 100
high-risk
Severity 30/34 · Critical
Exploitability 6/34 · Minimal
Exposure 25/34 · High