CVE-2016-4340
High · 8.8CVSS
8.8
EPSS
10.1%
Published
Jan 23, 2017
CISA due date
—
The record
The impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7, 8.5.0 through 8.5.11, 8.4.0 through 8.4.9, 8.3.0 through 8.3.8, and 8.2.0 through 8.2.4 allows remote authenticated users to "log in" as any other user via unspecified vectors.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Ubuntu:16.04:LTS | gitlab | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | gitlab | 0 | No fix |
Related vulnerabilities
- CVE-2024-12431 An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before… Also affects gitlab
- CVE-2023-5117 An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which… Also affects gitlab
- CVE-2024-8116 An issue has been discovered in GitLab CE/EE affecting all versions from 16.9 before… Also affects gitlab
- CVE-2024-8233 An issue has been discovered in GitLab CE/EE affecting all versions from 9.4 before… Also affects gitlab
- CVE-2024-9367 An issue was discovered in GitLab CE/EE affecting all versions starting from 13.9 before… Also affects gitlab
- CVE-2024-9387 An issue was discovered in GitLab CE/EE affecting all versions from 11.8 before 17.4.6… Also affects gitlab
- CVE-2024-8179 An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before… Also affects gitlab
- CVE-2024-10043 An issue has been discovered in GitLab EE affecting all versions starting from 14.3… Also affects gitlab