Harbor fails to validate the user permissions when reading and updating job execution logs through the P2P preheat execution logs
Résumé
Harbor fails to validate the user permissions when reading and updating job execution logs through the P2P preheat execution logs
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution logs. By sending a request that attempts to read/update P2P preheat execution logs and specifying different job IDs, malicious authenticated users could read all the job logs stored in the Harbor database.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com