CVE-2018-16976

State: Published
Severity: Not scored
Published: Sep 12, 2018
Updated: Sep 16, 2024
Reserved: Sep 12, 2018

Description

Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that is in the process of being migrated until the full set of migration steps has been completed. This can allow valid users to obtain unintended access.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://github.com/sitaramc/gitolite/commit/dc13dfca8fdae5634bb0865f7e9822d2a268ed59
https://bugs.debian.org/908699
https://groups.google.com/forum/#%21topic/gitolite-announce/WrwDTYdbfRg

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.