CVE-2024-1525: 
GitLab vulnerability analysis and mitigation

An authentication bypass vulnerability was discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.7.6, all versions starting from 16.8 before 16.8.3, and all versions starting from 16.9 before 16.9.1. Under specific conditions, LDAP users could bypass LDAP authentication by resetting their password using a verified secondary email address and subsequently signing in using direct authentication with the reset password (GitLab Release, NVD).

The vulnerability stems from an incomplete validation process in GitLab's authentication system. While GitLab normally prevents LDAP users from using direct password authentication, the system only partially validates this restriction during password reset requests. When a user attempts to reset their password using a secondary email address, the system only checks the global password authentication setting, bypassing the specific LDAP user validation. The vulnerability has been assigned a CVSS v3.1 base score of 5.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N (GitLab Release).

The vulnerability allows LDAP users to circumvent LDAP authentication controls by establishing direct authentication through password reset functionality. This bypass could potentially undermine the organization's centralized authentication controls and security policies that are enforced through LDAP (GitLab Release).

The vulnerability has been patched in GitLab versions 16.7.6, 16.8.3, and 16.9.1. Organizations are strongly recommended to upgrade to these or newer versions immediately. As a temporary workaround, organizations can disable the global password authentication setting through the sign-in restrictions configuration (GitLab Release).

The vulnerability was discovered internally by GitLab team member Drew Blessing, demonstrating GitLab's commitment to internal security review processes. The issue was addressed through GitLab's regular security release cycle, indicating a structured approach to vulnerability management (GitLab Release).