CVE-2022-1162
CRITICAL NUCLEIGitLab 14.7-14.7.6, 14.8-14.8.4, 14.9-14.9.1 - Authentication Bypass via Hardcoded OmniAuth Password
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2022-1162. PoCs published by Greenwolf, ipsBruno. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit leverages a hardcoded password vulnerability in GitLab CE/EE versions 14.7 to 14.9, allowing authentication bypass for accounts registered via OmniAuth providers. The hardcoded password '123qweQWE!@#000000000' can be used to log into affected accounts.
Description
A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML) in GitLab CE/EE versions 14.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowing attackers to potentially take over accounts
Exploits (3)
This exploit leverages a hardcoded password vulnerability in GitLab CE/EE versions 14.7 to 14.9, allowing authentication bypass for accounts registered via OmniAuth providers. The hardcoded password '123qweQWE!@#000000000' can be used to log into affected accounts.
This repository provides a writeup for CVE-2022-1162, detailing a hardcoded password vulnerability in GitLab CE/EE versions 14.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2. The hardcoded password '123qweQWE!@#000000000' can be used to take over accounts registered using an OmniAuth provider.
This PoC exploits CVE-2022-1162, an authentication bypass vulnerability in GitLab, by enumerating users and attempting to log in with a default password. It automates the process of finding project members and testing their credentials.
Nuclei Templates (1)
http.title:"GitLab" || cpe:"cpe:2.3:a:gitlab:gitlab" || http.title:"gitlab"
title="gitlab"
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N