{"id":"CVE-2017-17716","details":"GitLab 9.4.x before 9.4.2 does not support LDAP SSL certificate verification, but a verify_certificates LDAP option was mentioned in the 9.4 release announcement. This issue occurred because code was not merged. This is related to use of the omniauth-ldap library and the gitlab_omniauth-ldap gem.","modified":"2026-08-27T18:52:45.910180Z","published":"2017-12-17T17:29:00.227Z","references":[{"type":"REPORT","url":"https://about.gitlab.com/2017/07/22/gitlab-9-4-released/#security---add-ldap-ssl-certificate-verification"},{"type":"REPORT","url":"https://about.gitlab.com/2017/07/28/gitlab-9-dot-4-dot-2-released/"},{"type":"FIX","url":"https://gitlab.com/gitlab-org/gitlab-ce/issues/30420"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.com/gitlab-org/gitlab","events":[{"introduced":"1cfb4f1bd87be2a38c61dbe78f10c351449ab8b4"},{"last_affected":"1ae0012728304fb533c3267ddf23c77465821440"}],"database_specific":{"extracted_events":[{"introduced":"9.4.0"},{"last_affected":"9.4.0"},{"introduced":"9.4.0-rc1"},{"last_affected":"9.4.0-rc1"},{"introduced":"9.4.0-rc2"},{"last_affected":"9.4.0-rc2"},{"introduced":"9.4.0-rc3"},{"last_affected":"9.4.0-rc3"},{"introduced":"9.4.0-rc4"},{"last_affected":"9.4.0-rc4"},{"introduced":"9.4.0-rc5"},{"last_affected":"9.4.0-rc5"},{"introduced":"9.4.0-rc6"},{"last_affected":"9.4.0-rc6"},{"introduced":"9.4.1"},{"last_affected":"9.4.1"}],"source":"CPE_STRING","cpe":["cpe:2.3:a:gitlab:gitlab:9.4.0:*:*:*:*:*:*:*","cpe:2.3:a:gitlab:gitlab:9.4.0:rc1:*:*:*:*:*:*","cpe:2.3:a:gitlab:gitlab:9.4.0:rc2:*:*:*:*:*:*","cpe:2.3:a:gitlab:gitlab:9.4.0:rc3:*:*:*:*:*:*","cpe:2.3:a:gitlab:gitlab:9.4.0:rc4:*:*:*:*:*:*","cpe:2.3:a:gitlab:gitlab:9.4.0:rc5:*:*:*:*:*:*","cpe:2.3:a:gitlab:gitlab:9.4.0:rc6:*:*:*:*:*:*","cpe:2.3:a:gitlab:gitlab:9.4.1:*:*:*:*:*:*:*"]}}],"versions":["9.4.0","9.4.0-rc1","9.4.0-rc2","9.4.0-rc3","9.4.0-rc4","9.4.0-rc5","9.4.0-rc6","9.4.1","v9.4.1-ee","v9.4.0-ee"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-17716.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}