CVE-2023-3950

Summary

CVE-2023-3950 is a newly-discovered information disclosure vulnerability in GitLab Enterprise Edition (EE). Affecting versions 16.2 prior to 16.2.5 and 16.3 prior to 16.3.1, this issue grants other Group Owners the ability to view the Public Key associated with a Google Cloud Logging audit event streaming destination. While this vulnerability allows for the disclosure of this sensitive information, it is important to note that the ability to modify the key has been restricted, meaning that only the original owner can write to it.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.