Cyber Resilience

CVE-2024-1525

Auth Bypass in Gitlab 16.1 – 16.7.6

Published
22 February 2024
Modified
17 June 2026
CVSS Score v3.1 5.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS Score 0.0045 37th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2024-1525 is a medium-severity Authentication Bypass Using an Alternate Path or Channel (CWE-288) vulnerability in Gitlab Gitlab. Its CVSS base score is 5.3 (Medium).

Operationally, ranked at the 37th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

OWASP Top 10 for Web (2025)

EU & UK References

Vulnerability Data

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Under some specialized conditions, an LDAP user may be able…

more

to reset their password using their verified secondary email address and sign-in using direct authentication with the reset password, bypassing LDAP.

CWE(s)

Related Threats

CVEs Like This One

CVE-2026-1747Same product: Gitlab Gitlab
CVE-2025-0549Same product: Gitlab Gitlab
CVE-2026-2745Same product: Gitlab Gitlab
CVE-2025-11984Same product: Gitlab Gitlab
CVE-2026-0602Same product: Gitlab Gitlab
CVE-2026-4524Same product: Gitlab Gitlab
CVE-2023-2030Same product: Gitlab Gitlab
CVE-2026-13151Same product: Gitlab Gitlab
CVE-2024-1211Same product: Gitlab Gitlab
CVE-2023-5009Same product: Gitlab Gitlab

Affected Assets

gitlab
gitlab
16.9.0 · 16.1 — 16.7.6 · 16.8 — 16.8.3

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)

Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)
  • 7 hardening rules · 3 OS baselines
Validate
Prove the fix (OWASP ASVS)
  • V6.4.3
  • V6.6.1
  • V12.1.3

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-288

Authorizing remote access reduces the ability to bypass authentication via unauthorized alternate remote channels.

addresses: CWE-288

Users can identify logons via alternate paths or channels by reviewing the previous logon time.

addresses: CWE-288

Adaptive requirements can apply across access paths, reducing the ability to bypass authentication via alternate channels or paths.

addresses: CWE-288

Centralized IdPs close alternate authentication paths that enable bypass.

addresses: CWE-288

Enforces authentication for non-organizational users, making it harder to bypass via alternate paths or channels.

addresses: CWE-288

Requires authentication to occur exclusively over the isolated trusted path, directly preventing bypass via alternate or untrusted channels.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.AA-03 full match
prevents

Requiring authentication on every channel and path directly eliminates alternate-path bypasses.

PR.AA-05 mostly match
prevents

Enforcing authorizations and least privilege across all access vectors prevents unauthenticated alternate paths.

PR.IR-01 mostly match
prevents

Protecting networks and environments from unauthorized logical access blocks bypass via undocumented channels.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

detects

Security testing can detect alternate-path bypasses but does not prevent them in production.

degrades

Secure authentication control directly mitigates bypass by requiring strong, consistent authentication on all paths.

prevents

Access control policy directly addresses alternate authentication paths by requiring all channels to enforce authentication.

degrades

Authentication information management ensures credentials and mechanisms are consistently applied across all access paths.

prevents

Access rights provisioning and review prevent bypass via unmonitored or alternate channels.

prevents

Privileged access rights control reduces risk of bypass through elevated or alternate paths.

References