CVE-2023-20902 Timing attack risk in Harbor

2023-11-0900:36:25

vmware

raw.githubusercontent.com

cve-2023-20902

timing attack

harbor 2.6.x

harbor 2.7.2

harbor 2.8.2

harbor 1.10.17

network access

job tasks

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.3%

JSON

A timing condition in Harbor 2.6.x and below, Harbor 2.7.2 and below, Harbor 2.8.2 and below, and Harbor 1.10.17 and below allows an attacker with network access to
create jobs/stop job tasks and retrieve job task information.