GitLab
TMA-GITLAB-1.3.6
Ensure new members are required to be invited using company-approved email
Mô tả
Existing members of an organization can invite new members to join, however new members must only be invited with their company-approved email. Ensuring new members of an organization have company-approved email prevents existing members of the organization from inviting arbitrary new users to join. Without this verification, they can invite anyone who is using the organization's version control system or has an active email account, thus allowing outside users (and potential threat actors) to easily gain access to company private code and resources. This practice will subsequently reduce the chance of human error or typos when inviting a new member.
Cách kiểm tra
Phương pháp kiểm tra: Xem xét thủ công
For each group in use, verify for every invitation that the invited email address is company-approved by performing the following: On the left sidebar, select Search or go to and find your group. Select Manage > Members. Members that are not automatically added are displayed on the Invited tab. Verify that each invitation email is company approved by your company.
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
For each group, allow only users with company-approved email to be invited. If a user was invited without company-approved email, perform the following: On the left sidebar, select Search or go to and find your group. Select Manage > Members. Members that are not automatically added are displayed on the Invited tab. Verify that each invitation email is company approved by your company. To cancel the user's invitation to join your organization, click Cancel invitation.
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- devsecopsgitlab
- Tham chiếu
- CIS GitLab Benchmark v1.0.1 - 1.3.6 Ensure new members are required to be invited using company-approved email