CVE-2022-31669
Harbor fails to validate the user permissions when updating tag immutability policies
概要
Harbor fails to validate the user permissions when updating tag immutability policies
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Harbor fails to validate the user permissions when updating tag immutability policies.
By sending a request to update a tag immutability policy with an id that belongs to a
project that the currently authenticated user doesn’t have access to, the attacker could
modify tag immutability policies configured in other projects.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
harbor
[{"type":"SEMVER","events":[{"introduced":"2.0.0"},{"fixed":"2.4.3"},{"introduced":"2.5.0"},{"fixed":"2.5.2"}]}]
参照URL
- advisory github.com
- web nvd.nist.gov