Lucene search
GoogleOSV:GHSA-9WVH-FF5F-XJPJHistoryFeb 15, 2022 - 1:57 a.m.
Missing Authorization in Harbor
2022-02-1501:57:18
Google
osv.dev
6
0.965 High
EPSS
Percentile
99.6%
core/api/user.go in Harbor 1.7.0 through 1.8.2 allows non-admin users to create admin accounts via the POST /api/users API. This is fixed in 1.9.0-rc1.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/goharbor/harbor | ge | 1.7.0 | |
| github.com/goharbor/harbor | lt | 1.9.0-rc1 |
References
www.vmware.com/security/advisories/VMSA-2019-0015.html
github.com/goharbor/harbor/commit/b6db8a8a106259ec9a2c48be8a380cb3b37cf517
github.com/goharbor/harbor/compare/v1.8.2...v1.9.0-rc1
github.com/goharbor/harbor/releases/tag/v1.7.6
github.com/goharbor/harbor/releases/tag/v1.8.3
github.com/ianxtianxt/CVE-2019-16097
nvd.nist.gov/vuln/detail/CVE-2019-16097
unit42.paloaltonetworks.com/critical-vulnerability-in-harbor-enables-privilege-escalation-from-zero-to-admin-cve-2019-16097
Related
attackerkb
attackerkb
CVE-2019-16097
2019-09-08 00:00:00
osv
osv
CVE-2019-16097
2019-09-08 16:15:11
nvd
nvd
CVE-2019-16097
2019-09-08 16:15:11
cve
cve
CVE-2019-16097
2019-09-08 16:15:11
githubexploit
githubexploit
Exploit for Missing Authorization in Linuxfoundation Harbor
2019-09-22 11:24:28
Exploit for Missing Authorization in Linuxfoundation Harbor
2019-09-20 02:03:45
Exploit for Missing Authorization in Linuxfoundation Harbor
2019-10-02 16:53:06
vmware
vmware
veracode
veracode
Unauthorised Admin User Account Creation
2019-09-06 06:10:11
prion
prion
Authentication flaw
2019-09-08 16:15:00
cvelist
cvelist
CVE-2019-16097
2019-09-08 15:22:49
nessus
nessus
VMware Harbor 1.7.x < 1.7.6, 1.8.x < 1.8.3 (VMSA-2019-0015)
2019-10-17 00:00:00
VMware Harbor Privilege Escalation (VMSA-2019-0015) (CVE-2019-16097)
2019-10-11 00:00:00
checkpoint_advisories
checkpoint_advisories
Harbor Container Registry Privilege Escalation (CVE-2019-16097)
2020-03-01 00:00:00
nuclei
nuclei
Harbor <=1.82.0 - Privilege Escalation
2021-02-19 06:08:32
myhack58
myhack58
github
github
Missing Authorization in Harbor
2022-02-15 01:57:18