High
Security advisory
Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2017-0925
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 06:56 UTC · Revision 1
Source evidence
Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password.
osv:CVE-2017-0925
Complete source record
{
"id": "bb91f5bc8783145436e5cb0beaa3a8ec17dc7f98af22c871eda5842ae9042870",
"url": "https://osv.dev/vulnerability/CVE-2017-0925",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2017-0925",
"summary": "Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password.",
"evidence": "osv:CVE-2017-0925",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2017-0925",
"aliases": [
"CVE-2017-0925"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://gitlab.com/gitlab-org/gitlab",
"type": "GIT",
"events": [
{
"introduced": "b50421f8650a390aa637da68c7e0138dd764fdf3"
},
{
"last_affected": "9c32fedb6d29601a9cb698a25f8b917724b484b3"
},
{
"introduced": "235b8d50ad14e7cdf4bc61c3df070f38dee97974"
},
{
"last_affected": "5a1abb98b40ef0047d634b6ff09c3379da46cff9"
},
{
"introduced": "d90716aff22310b27734df86d287d2cb4084fdbb"
},
{
"last_affected": "3ec4b67ffebfd15dd22fca7b35b0405454422df7"
},
{
"introduced": "6369db0196ec7b6e288b16382c95243424a59b62"
},
{
"last_affected": "3f64be9aeeb1a8c7c88b50bdf0212118dc265ce6"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"range": [
{
"introduced": "8.0.0"
},
{
"last_affected": "9.5.10"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"range": [
{
"introduced": "8.0.0"
},
{
"last_affected": "9.5.10"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"range": [
{
"introduced": "10.0.0"
},
{
"last_affected": "10.1.5"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"range": [
{
"introduced": "10.0.0"
},
{
"last_affected": "10.1.5"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"range": [
{
"introduced": "10.2.0"
},
{
"last_affected": "10.2.5"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"range": [
{
"introduced": "10.2.0"
},
{
"last_affected": "10.2.5"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"range": [
{
"introduced": "10.3.0"
},
{
"last_affected": "10.3.3"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"range": [
{
"introduced": "10.3.0"
},
{
"last_affected": "10.3.3"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-0925.json"
}
}
],
"modified": "2026-10-30T10:30:38.433676293Z",
"provider": "osv",
"references": [
"https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/",
"https://www.debian.org/security/2018/dsa-4145",
"https://gitlab.com/gitlab-org/gitlab-ee/issues/3847"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2017-0925",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 436408,
"published_at": "2018-03-21T20:29:00.747+00:00"
}