description: A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once ownership of them has changed.
problem types: Privilege Escalation (CAPEC-233)
affected:
{
product: GitLab Community Edition and GitLab Enterprise Edition
vendor: GitLab
versions:
status: affected, version: Affects GitLab CE/EE 9.0 and later
status: affected, version: Fixed in 12.1.2 in 12.0.4 and in 11.11.6
}