description: An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval rules to be overridden without appropriate permissions.
problem types: Improper Access Control - Generic (CWE-284)
affected:
{
product: GitLab EE
vendor: GitLab
versions:
status: affected, version: before 12.1.2
status: affected, version: before 12.0.4
status: affected, version: before 11.11.6
}