CVE-2022-46463

An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication. NOTE: the...

Original description

The description as published by the source.

An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication. NOTE: the vendor's position is that this "is clearly described in the documentation as a feature."

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami harbor

[{"type":"SEMVER","events":[{"introduced":"1.1.0"},{"fixed":"2.5.4"}]}]

References

advisory nvd.nist.gov
advisory github.com
web github.com
web github.com
web github.com