CVE-2022-46463

Summary

An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication. NOTE: the vendor's position is that this "is clearly described in the documentation as a feature."

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/lanqingaa/123/blob/main/README.md
• https://github.com/lanqingaa/123/tree/bb48caa844d88b0e41e69157f2a2734311abf02d
• https://github.com/Vad1mo

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://github.com/lanqingaa/123/blob/main/README.md
• https://github.com/lanqingaa/123/tree/bb48caa844d88b0e41e69157f2a2734311abf02d
• https://github.com/Vad1mo

• ←Previous
• Next→