GitLab EE contained an authorization flaw affecting multiple version ranges (>=9.5.0 <18.11.7, >=19.0.0 <19.0.4, >=19.1.0 <19.1.2) where an authenticated maintainer could obtain stored credentials of other users. The vulnerability arises from improper authorization checks that fail to restrict access to sensitive credential data. This issue has been fixed in versions 18.11.7, 19.0.4, and 19.1.2 respectively.

An attacker with maintainer-level access could retrieve credentials belonging to other users, potentially leading to unauthorized access or privilege escalation within the GitLab environment. This exposure compromises user credential confidentiality but requires authenticated maintainer permissions to exploit.

Upgrade affected GitLab EE instances to versions 18.11.7, 19.0.4, or 19.1.2 or later where this vulnerability is fixed. No other mitigation is indicated or required as the issue is resolved by these official patches.