251 matches found
CVE-2024-8260 vulnerabilities
Vulnerabilities for packages: spire-server, opa, conftest, kubescape, kots, snyk-cli, k8sgpt, cosign, policy-controller, tfsec, zarf, zot...
CVE-2024-8260 vulnerabilities
Vulnerabilities for packages: opa, zarf, conftest-fips, policy-controller, snyk-cli, k8sgpt, policy-controller-fips, spire-server-fips, cosign-fips, zot, kubescape, conftest, spire-server, tfsec, kots, cosign...
Cache driver GetBlob() allows read access to any blob without access control check
Summary Cache driver GetBlob allows read access to any blob without access control check Details If a Zot accessControl policy allows users read access to some repositories but restricts read access to other repositories and dedupe is enabled it is enabled by default, then an attacker who knows t...
GHSA-55R9-5MX9-QQ7R Cache driver GetBlob() allows read access to any blob without access control check
Summary Cache driver GetBlob allows read access to any blob without access control check Details If a Zot accessControl policy allows users read access to some repositories but restricts read access to other repositories and dedupe is enabled it is enabled by default, then an attacker who knows t...
CVE-2024-39897
zot is an OCI image registry. Prior to 2.1.0, the cache driver GetBlob allows read access to any blob without access control check. If a Zot accessControl policy allows users read access to some repositories but restricts read access to other repositories and dedupe is enabled it is enabled by...
CVE-2024-39897 Cache driver GetBlob() allows read access to any blob without access control check
zot is an OCI image registry. Prior to 2.1.0, the cache driver GetBlob allows read access to any blob without access control check. If a Zot accessControl policy allows users read access to some repositories but restricts read access to other repositories and dedupe is enabled it is enabled by...
CVE-2024-39897 Cache driver GetBlob() allows read access to any blob without access control check
zot is an OCI image registry. Prior to 2.1.0, the cache driver GetBlob allows read access to any blob without access control check. If a Zot accessControl policy allows users read access to some repositories but restricts read access to other repositories and dedupe is enabled it is enabled by...
CVE-2024-39897 Cache driver GetBlob() allows read access to any blob without access control check
zot is an OCI image registry. Prior to 2.1.0, the cache driver GetBlob allows read access to any blob without access control check. If a Zot accessControl policy allows users read access to some repositories but restricts read access to other repositories and dedupe is enabled it is enabled by...
CVE-2024-39897
CVE-2024-39897 affects Zot’s registry code (zot) prior to 2.1.0. The cache driver GetBlob() can read any blob without an access check, enabling an attacker who knows an image name and a blob digest (to which they have no read access) to read that blob via another repository that the attacker can ...
zot Security Vulnerabilities
zot is an OCI image registry open-sourced by The zot Project. A security vulnerability exists in versions of zot prior to 2.1.0 that stems from the cache driver GetBlob allowing read access to any blob without access control checking...
PT-2024-28715 · Zot · Zot
Name of the Vulnerable Software and Affected Versions: zot versions prior to 2.1.0 Description: The cache driver GetBlob in zot, an OCI image registry, allows read access to any blob without an access control check. If a Zot accessControl policy allows users read access to some repositories but...
GHSA-3669-72X9-R9P3 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy, zot...
GHSA-3669-72X9-R9P3 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy-fips, zot, harbor-scanner-trivy...
CVE-2024-37298 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy, zot...
CVE-2024-37298 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy-fips, zot, harbor-scanner-trivy...
GHSA-XFHP-JF8P-MH5W vulnerabilities
Vulnerabilities for packages: k9s, zarf, conftest-fips, snyk-cli, trivy-fips, zot, kubescape, tflint, conftest, trivy, grype, terragrunt, tfsec, wolfictl, terraform, kots...
GHSA-XFHP-JF8P-MH5W vulnerabilities
Vulnerabilities for packages: conftest, k9s, grype, tflint, kubescape, kots, snyk-cli, wolfictl, terragrunt, trivy, tfsec, zarf, zot, terraform...
GHSA-2HMF-46V7-V6FX vulnerabilities
Vulnerabilities for packages: dagger, melange, zot, guac...