HIGH🇵🇱 Wersja polska

CVE-2019-19025

CVSS 8.8v3.1pub. 2020-03-20upd. 2024-11-21

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry for the Pivotal Platform.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Linuxfoundation Harbor

    APP
    Linuxfoundation
    1.7.0 – 1.8.6 (bez)1.9.0 – 1.9.3 (bez)

  • Pivotal VMware Harbor Registry

    APP
    Pivotal
    wszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Container
CWE
References

Related vulnerabilities

CVE-2022-31671HIGH7.4ten sam produkt

Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat...

CVE-2022-31668HIGH7.4ten sam produkt

Harbor fails to validate the user permissions when updating p2p preheat policies. By sending a request to upda...

CVE-2022-31666HIGH7.7ten sam produkt

Harbor fails to validate user permissions while deleting Webhook policies, allowing malicious users to view, u...

CVE-2022-31670HIGH7.7ten sam produkt

Harbor fails to validate the user permissions when updating tag retention policies.  By sending a request to ...

CVE-2022-46463HIGH7.5ten sam produkt

An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image reposit...