Medium severity5.3NVD Advisory· Published Mar 13, 2020· Updated Jun 17, 2026
CVE-2020-10079
CVE-2020-10079
Description
GitLab 7.10 through 12.8.1 has Incorrect Access Control. Under certain conditions where users should have been required to configure two-factor authentication, it was not being required.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 2 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=7.10.0,<=12.8.1
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=7.10.0,<=12.8.1
- (no CPE)range: 7.10 - 12.8.1
- GitLab/GitLabdescription
Patches
Vulnerability mechanics
References
2- about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/nvdRelease NotesVendor Advisory
- about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/index.htmlnvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.