{"metadata": {"vulnerability": "CVE-2022-1162", "count": 38, "kinds": {"milestone": 7, "sighting": 18, "kev": 0, "other": 13}}, "data": [{"timestamp": "2022-03-29T00:00:00Z", "date_only": false, "value": "2022-03-29T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-1162", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-04-01T00:00:00Z", "date_only": false, "value": "2022-04-01T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-304", "record": "CERTFR-2022-AVI-304", "field": "last_revision_date"}, {"timestamp": "2022-04-01T00:00:00Z", "date_only": false, "value": "2022-04-01T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-304", "record": "CERTFR-2022-AVI-304", "field": "initial_release_date"}, {"timestamp": "2022-04-01T00:00:00Z", "date_only": false, "value": "2022-04-01T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-304", "record": "CERTFR-2022-AVI-304", "field": "revisions.0.revision_date"}, {"timestamp": "2022-04-01T10:33:33Z", "date_only": false, "value": "2022-04-01T10:33:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tech_b0lt_Genona/3073", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "b8f84bfb-73be-41d7-b610-300c54465986", "content": "\u0412 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 GitLab 14.7.7, 14.8.5 \u0438 14.9.2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-1162), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u043f\u0440\u0435\u0434\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 (hardcoded) \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0434\u043b\u044f \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430 OmniAuth (OAuth, LDAP \u0438 SAML). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438. \u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435. \u0414\u0435\u0442\u0430\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 GitLab, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b, \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 OAuth, LDAP \u0438 SAML\nhttps://www.opennet.ru/opennews/art.shtml?num=56948\n\nGitLab Critical Security Release: 14.9.2, 14.8.5, and 14.7.7\nhttps://about.gitlab.com/releases/2022/03/31/critical-security-release-gitlab-14-9-2-released/", "url": "https://t.me/tech_b0lt_Genona/3073"}, {"timestamp": "2022-04-01T22:03:57Z", "date_only": false, "value": "2022-04-01T22:03:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xakep_ru/12160", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "ed5207f3-7df3-4b65-b990-1ec78819f3f3", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 GitLab \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0447\u0443\u0436\u0438\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b\n\n\u0412 GitLab \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 CVE-2022-1162 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0430 \u043a\u0430\u043a GitLab Community Edition (CE), \u0442\u0430\u043a \u0438 Enterprise Edition (EE).\n\nhttps://xakep.ru/2022/04/01/gitlab-passwords/", "url": "https://t.me/xakep_ru/12160"}, {"timestamp": "2022-04-02T06:06:55Z", "date_only": false, "value": "2022-04-02T06:06:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/2041", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "17927f11-fe5c-44ec-b3b2-b06cf8877905", "content": "DevOps platform GitLab has released software updates to fix a critical vulnerability (CVE-2022-1162) that could allow attackers to hijack accounts.\n\nRead details: https://thehackernews.com/2022/04/gitlab-releases-patch-for-critical.html", "url": "https://t.me/thehackernews/2041"}, {"timestamp": "2022-04-02T10:36:12Z", "date_only": false, "value": "2022-04-02T10:36:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/9246", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "9dd6a977-63db-469d-8073-5e72d20c2438", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Zero-Day: GitLab has addressed a critical vulnerability, tracked as CVE-2022-1162 (CVSS score of 9.1), that could allow remote attackers to take over user accounts.\n\nhttps://securityaffairs.co/wordpress/129730/hacking/cve-2022-1162-flaw-gitlab.html", "url": "https://t.me/cKure/9246"}, {"timestamp": "2022-04-02T12:11:44Z", "date_only": false, "value": "2022-04-02T12:11:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/49616", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "f487fb20-b52f-4cb0-94b1-be2c255aadd0", "content": "Critical CVE-2022-1162 flaw in GitLab allowed threat actors to take over accounts\n\nhttps://ift.tt/VDOfqpM", "url": "https://t.me/ctinow/49616"}, {"timestamp": "2022-04-03T13:46:44Z", "date_only": false, "value": "2022-04-03T13:46:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NeKaspersky/2070", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "5abb19ca-c963-4d92-a44e-765ce09ba561", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 GitLab \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439\n\n\u0411\u0430\u0433, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u043a\u0430\u043a CVE-2022-1162, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 100,000+ \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 GitLab Community Edition \u0438 Enterprise Edition \u0438 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u043b \u043f\u0440\u0438 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c OmniAuth. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430\u043c \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0445\u0430\u0440\u0434\u043a\u043e\u0434\u043d\u0443\u0442\u044b\u0439 (\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u044b\u0439) \u043f\u0430\u0440\u043e\u043b\u044c. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0435\u0440\u0441\u0438\u0438 14.7 \u0434\u043e 14.7.7, 14.8 \u0434\u043e 14.8.5, \u0438 14.9 \u0434\u043e 14.9.2.\n\n\u0425\u043e\u0442\u044f \u0432 GitLab \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u0441\u0435\u043c \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u043c \u0441\u0440\u043e\u0447\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0430 \u0435\u0449\u0435 \u043b\u0443\u0447\u0448\u0435 \u2014 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c MFA. \u0422\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0431\u044b\u043b\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0431\u0440\u043e\u0448\u0435\u043d\u044b, \u043f\u0440\u0430\u0432\u0434\u0430 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u044a\u044f\u0441\u043d\u0435\u043d\u0438\u0439 \u043a\u0430\u0441\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u044d\u043a\u0432\u0438\u0432\u0430\u043b\u0435\u043d\u0442\u0430 \u044d\u0442\u043e\u0433\u043e \u0441\u0430\u043c\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 (\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u043b\u0438\u0441\u044c \u043e\u0431\u0442\u0435\u043a\u0430\u0435\u043c\u044b\u043c \u00ab\u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u0440\u0443\u0433\u0430 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432\u00bb).\n\n\u0412 \u043f\u043e\u043c\u043e\u0449\u044c \u0430\u0434\u043c\u0438\u043d\u0430\u043c \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 DevOps \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 CVE-2022-1162 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u0438\u0445 \u043f\u0430\u0440\u043e\u043b\u0438 \u0432\u0440\u0443\u0447\u043d\u0443\u044e.\n@NeKaspersky", "url": "https://t.me/NeKaspersky/2070"}, {"timestamp": "2022-04-04T12:35:00Z", "date_only": false, "value": "2022-04-04T12:35:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/2802", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "497f5977-fd00-4342-9939-f545bfd604f0", "content": "GitLab \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-1162, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043a\u0430\u043a GitLab Community Edition (CE), \u0442\u0430\u043a \u0438 Enterprise Edition (EE), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439.\n\n\u0421\u0435\u0439\u0447\u0430\u0441 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 DevOps \u043e\u0442 GitLab \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 100 000 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u043d\u0430 \u043d\u0435\u0439 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u043e\u0440\u044f\u0434\u043a\u0430 30 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 66 \u0441\u0442\u0440\u0430\u043d \u043c\u0438\u0440\u0430.\n\n\u0414\u0435\u043b\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430 OmniAuth (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, OAuth, LDAP, SAML) \u0432 GitLab CE/EE \u0432\u0435\u0440\u0441\u0438\u0439 14.7 \u0434\u043e 14.7.7, 14.8 \u0434\u043e 14.8.5 \u0438 14.9 \u0434\u043e 14.9.2, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0431\u044b\u043b \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u0430\u0440\u043e\u043b\u044c.\n\nGitLab \u0442\u0430\u043a\u0436\u0435 \u0441\u0431\u0440\u043e\u0441\u0438\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 GitLab.com \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0443\u0441\u0438\u043b\u0438\u0439 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 CVE-2022-1162. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043c\u0438\u0442 \u043a\u043e\u0434\u0430 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 GitLab  \u0444\u0430\u0439\u043b\u0430 lib/gitlab/password.rb, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u043b\u0430\u0431\u043e\u0433\u043e \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u0440\u043e\u043b\u044f \u043a\u043e\u043d\u0441\u0442\u0430\u043d\u0442\u0435 TEST_DEFAULT.\n\nGitLab \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0441\u0430\u043c\u043e\u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f\u00a0\u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 CVE-2022-1162.\u00a0\n\n\u0414\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c\u0438 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043e.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 GitLab \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (14.9.2, 14.8.5 \u0438\u043b\u0438 14.7.7), \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.", "url": "https://t.me/true_secator/2802"}, {"timestamp": "2022-04-04T19:46:14Z", "date_only": false, "value": "2022-04-04T19:46:14.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-1162", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-04-04T20:15:00Z", "date_only": false, "value": "2022-04-04T20:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VRQC-VWGR-QQP5", "record": "GHSA-VRQC-VWGR-QQP5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-04-04T20:15:00Z", "date_only": false, "value": "2022-04-04T20:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-1162", "record": "UBUNTU-CVE-2022-1162", "field": "published"}, {"timestamp": "2022-04-04T20:15:00Z", "date_only": false, "value": "2022-04-04T20:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-1162", "record": "GSD-2022-1162", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-04-04T20:15:09.943Z", "date_only": false, "value": "2022-04-04T20:15:09.943", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-1162", "record": "FKIE_CVE-2022-1162", "field": "published"}, {"timestamp": "2022-04-05T00:00:19Z", "date_only": false, "value": "2022-04-05T00:00:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VRQC-VWGR-QQP5", "record": "GHSA-VRQC-VWGR-QQP5", "field": "published"}, {"timestamp": "2022-04-12T00:00:51Z", "date_only": false, "value": "2022-04-12T00:00:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VRQC-VWGR-QQP5", "record": "GHSA-VRQC-VWGR-QQP5", "field": "modified"}, {"timestamp": "2022-04-26T16:06:30Z", "date_only": false, "value": "2022-04-26T16:06:30.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitLab", "record": "CVE-2022-1162", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-04-27T20:35:00Z", "date_only": false, "value": "2022-04-27T20:35Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-1162", "record": "GSD-2022-1162", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-07-14T08:12:13Z", "date_only": false, "value": "2022-07-14T08:12:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/11969", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "baf9d4bc-36eb-483f-8963-6e7db5f96301", "content": "https://github.com/Greenwolf/CVE-2022-1162", "url": "https://t.me/intelexch/11969"}, {"timestamp": "2023-12-13T01:19:28.558Z", "date_only": false, "value": "2023-12-13T01:19:28.558212Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-1162", "record": "GSD-2022-1162", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-06T11:16:21.468Z", "date_only": false, "value": "2024-03-06T11:16:21.468Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2022-1162", "record": "BIT-GITLAB-2022-1162", "field": "published"}, {"timestamp": "2024-08-02T23:55:24.375Z", "date_only": false, "value": "2024-08-02T23:55:24.375Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-1162", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T23:55:24.375Z", "date_only": false, "value": "2024-08-02T23:55:24.375Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-1162", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-24T04:52:54Z", "date_only": false, "value": "2025-10-24T04:52:54Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-1162", "record": "UBUNTU-CVE-2022-1162", "field": "modified"}, {"timestamp": "2026-06-17T04:21:55.940Z", "date_only": false, "value": "2026-06-17T04:21:55.940", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-1162", "record": "FKIE_CVE-2022-1162", "field": "lastModified"}, {"timestamp": "2026-07-17T05:00:06.715Z", "date_only": false, "value": "2026-07-17T05:00:06.715369Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/130", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "fa0188c4-30b0-42a0-bb97-3a0d52df3bb1", "url": "https://t.me/EchelonEyes/130"}, {"timestamp": "2026-07-18T00:00:35.886Z", "date_only": false, "value": "2026-07-18T00:00:35.886383Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/130", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "7582ef5d-f366-4226-a1a4-1b1e314efbb3", "url": "https://t.me/EchelonEyes/130"}, {"timestamp": "2026-07-29T12:00:56.409Z", "date_only": false, "value": "2026-07-29T12:00:56.409970Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/4611", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "299fc0e3-2916-4d8c-b60d-10e056c01f6d", "url": "https://t.me/CVEhub/4611"}, {"timestamp": "2026-07-30T00:01:33.443Z", "date_only": false, "value": "2026-07-30T00:01:33.443550Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/4611", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "ccacc5c0-60ee-4046-9a1b-edda3bddac42", "url": "https://t.me/CVEhub/4611"}, {"timestamp": "2026-07-31T22:00:03.371Z", "date_only": false, "value": "2026-07-31T22:00:03.371077Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/4611", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "9bc26ff1-2986-4ef0-88c1-a01cadc57603", "url": "https://t.me/CVEhub/4611"}, {"timestamp": "2026-08-01T00:00:11.627Z", "date_only": false, "value": "2026-08-01T00:00:11.627136Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/4611", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "7d420105-ba0a-4e7d-9163-a505ab07c89e", "url": "https://t.me/CVEhub/4611"}, {"timestamp": "2026-09-01T17:00:11.222Z", "date_only": false, "value": "2026-09-01T17:00:11.222632Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/524", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "be05002a-1758-4ee1-878c-9e5a6f8d54d4", "url": "https://t.me/Hackme_news/524"}, {"timestamp": "2026-09-01T20:01:42.992Z", "date_only": false, "value": "2026-09-01T20:01:42.992238Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/51273", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "be485102-fc4a-4090-bcb3-45e8b2a4e24c", "url": "https://t.me/hacking_Attack/51273"}, {"timestamp": "2026-09-01T20:01:48.048Z", "date_only": false, "value": "2026-09-01T20:01:48.048157Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/48750", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "43f13503-d295-474a-96f2-2271d2a15352", "url": "https://t.me/hacking_Attack/48750"}, {"timestamp": "2026-09-05T23:00:04.282Z", "date_only": false, "value": "2026-09-05T23:00:04.282665Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/51273", "record": "CVE-2022-1162", "field": "creation_timestamp", "uuid": "0b126b5f-994b-46a5-b2ec-ab71759503d4", "url": "https://t.me/hacking_Attack/51273"}, {"timestamp": "2026-09-10T15:46:03.895Z", "date_only": false, "value": "2026-09-10T15:46:03.895Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2022-1162", "record": "BIT-GITLAB-2022-1162", "field": "modified"}]}