Harbor fails to validate the user permissions when reading job execution logs through the P2P preheat execution logs

🗓️ 09 Sep 2022 19:47:03Reported by GitHub Advisory DatabaseType

Harbor fails to validate user permissions reading P2P preheat execution log

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2022-31671	14 Nov 202411:45	–	circl
CNNVD	Harbor 授权问题漏洞	14 Nov 202400:00	–	cnnvd
CVE	CVE-2022-31671	14 Nov 202411:42	–	cve
Cvelist	CVE-2022-31671 Harbor fails to validate the user permissions when reading and updating job execution logs through the P2P preheat execution logs	14 Nov 202411:42	–	cvelist
EUVD	EUVD-2022-6909	3 Oct 202520:07	–	euvd
NVD	CVE-2022-31671	14 Nov 202412:15	–	nvd
OSV	BIT-HARBOR-2022-31671 Harbor fails to validate the user permissions when reading and updating job execution logs through the P2P preheat execution logs	20 Nov 202407:10	–	osv
OSV	GHSA-Q76Q-Q8HW-HMPW Harbor fails to validate the user permissions when reading job execution logs through the P2P preheat execution logs	9 Sep 202219:47	–	osv
Positive Technologies	PT-2022-20884 · Harbor · Harbor	9 Sep 202200:00	–	ptsecurity
Vulnrichment	CVE-2022-31671 Harbor fails to validate the user permissions when reading and updating job execution logs through the P2P preheat execution logs	14 Nov 202411:42	–	vulnrichment

Vulners

Node

goharbor harborRange2.5.0–2.5.1go

goharbor harborRange2.0.0–2.4.2go

goharbor harborRange1.0.0–1.10.12go

Source	Link
github	www.github.com/goharbor/harbor/security/advisories/GHSA-q76q-q8hw-hmpw
github	www.github.com/goharbor/harbor/security/advisories/GHSA-3wpx-625q-22j7
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-31671
github	www.github.com/advisories/GHSA-q76q-q8hw-hmpw

19 Nov 2024 20:36Current

0.8Low risk

Vulners AI Score0.8

CVSS 3.17.4

EPSS0.00137

SSVC