Lucene search
+L

CVE-2025-4374

🗓️ 06 May 2025 14:49:28Reported by redhatType 
cve
 cve
🔗 web.nvd.nist.gov👁 67 Views

Flaw in Quay grants Admin permissions to users on new repositories when acting as proxy cache.

Related
Detection
Affected
Refs
NVD
Vulners
Node
redhatquayRange3.14.0
[
  {
    "vendor": "Project Quay",
    "product": "quay",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "3.11.11",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "2.14.0",
        "lessThan": "3.14.2",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "3.12.0",
        "lessThan": "3.12.10",
        "versionType": "semver"
      }
    ],
    "packageName": "quay",
    "collectionURL": "https://github.com/quay/quay",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/clair-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.14.2-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-bridge-operator-bundle",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.14.2-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-bridge-operator-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.14.2-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-builder-qemu-rhcos-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.14.2-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-builder-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.14.2-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-container-security-operator-bundle",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.14.2-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-container-security-operator-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.14.2-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-operator-bundle",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.14.2-6",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-operator-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.14.2-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.14.2-7",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/clair-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.13.6-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-bridge-operator-bundle",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.13.6-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-bridge-operator-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.13.6-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-builder-qemu-rhcos-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.13.6-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-builder-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.13.6-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-container-security-operator-bundle",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.13.6-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-container-security-operator-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.13.6-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-operator-bundle",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.13.6-6",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-operator-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.13.6-2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.13.6-5",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/clair-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.11.11-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-bridge-operator-bundle",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.11.11-2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-bridge-operator-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.11.11-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-builder-qemu-rhcos-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.11.11-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-builder-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.11.11-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-container-security-operator-bundle",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.11.11-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-container-security-operator-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.11.11-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-operator-bundle",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.11.11-7",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-operator-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.11.11-2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.11.11-5",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/clair-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.12.10-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-bridge-operator-bundle",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.12.10-3",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-bridge-operator-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.12.10-2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-builder-qemu-rhcos-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.12.10-2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-builder-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.12.10-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-container-security-operator-bundle",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.12.10-2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-container-security-operator-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.12.10-2",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-operator-bundle",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.12.10-4",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-operator-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.12.10-1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "v3.12.10-3",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3::el8"
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

07 Aug 2026 14:16Current
6.5Medium risk
Vulners AI Score6.5
CVSS 3.16.5
EPSS0.00322
SSVC
67