An access control issue in Harbor v1.X.X to v2.5.3 allows unauthenticated access to image repositories
Reporter | Title | Published | Views | Family All 10 |
---|---|---|---|---|
![]() | Design/Logic Flaw | 13 Jan 202300:15 | – | prion |
![]() | Harbor <=2.5.3 - Unauthorized Access | 16 Aug 202308:46 | – | nuclei |
![]() | Exploit for Missing Authentication for Critical Function in Linuxfoundation Harbor | 16 Jan 202307:10 | – | githubexploit |
![]() | Exploit for Missing Authentication for Critical Function in Linuxfoundation Harbor | 17 Jan 202314:58 | – | githubexploit |
![]() | Exploit for Missing Authentication for Critical Function in Linuxfoundation Harbor | 21 Mar 202310:40 | – | githubexploit |
![]() | Exploit for Missing Authentication for Critical Function in Linuxfoundation Harbor | 23 Dec 202408:35 | – | githubexploit |
![]() | BIT-harbor-2022-46463 | 6 Mar 202410:53 | – | osv |
![]() | VMware Harbor Unauthorized Access Vulnerability | 17 Jan 202300:00 | – | cnvd |
![]() | CVE-2022-46463 | 12 Jan 202300:00 | – | cvelist |
![]() | CVE-2022-46463 | 13 Jan 202300:15 | – | nvd |
Parameter | Position | Path | Description | CWE |
---|---|---|---|---|
--dump | query param | /harbor.py | Unauthorized access to public and private image repositories in Harbor allows for information leakage. | CWE-306 |
--dump_all | query param | /harbor.py | Unauthorized access to public and private image repositories in Harbor allows for information leakage. | CWE-306 |
--tags | query param | /harbor.py | Unauthorized access to public and private image repositories in Harbor allows for information leakage. | CWE-306 |
--history | query param | /harbor.py | Unauthorized access to public and private image repositories in Harbor allows for information leakage. | CWE-306 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo