| Title | GitLab CE/EE - Hard-Coded Credentials |
|---|---|
| Author | GitLab Red Team |
| Severity | Critical |
| Impact | Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information or unauthorized actions within the GitLab application. |
| Remediation | Tooling to find relevant hashes based on the semantic version ranges specified in the CVE is linked in the reference section below. |
| CVSS Score | 9.8 |
| EPSS Score | 0.88627 |
| CVE ID | CVE-2022-1162 |
| CWE ID | CWE-798 |
| Shodan Query | http.title:"GitLab"cpe:"cpe:2.3:a:gitlab:gitlab"http.title:"gitlab" |
| Fofa Query | title="gitlab" |
| Tags | cve cve2022 gitlab packetstorm vuln |
GitLab CE/EE contains a hard-coded credentials vulnerability. A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML), allowing attackers to potentially take over accounts. This template attempts to passively identify vulnerable versions of GitLab without the need for an exploit by matching unique hashes for the application-
GET /users/sign_in HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1162.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-1162.pcap
N/AN/A